diff --git a/schemas/2018-08-01/Microsoft.Network.json b/schemas/2018-08-01/Microsoft.Network.json index 9fb865c9ef..819a77ac76 100644 --- a/schemas/2018-08-01/Microsoft.Network.json +++ b/schemas/2018-08-01/Microsoft.Network.json @@ -7,24 +7,6 @@ "frontDoors": { "type": "object", "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9][a-zA-Z0-9])$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the Front Door which is globally unique." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/frontDoors" - ] - }, "apiVersion": { "type": "string", "enum": [ @@ -35,19 +17,19 @@ "type": "string", "description": "Resource location." }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9]?[a-zA-Z0-9])*$", + "minLength": 5, + "maxLength": 64 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Name of the Front Door which is globally unique." }, "properties": { "oneOf": [ @@ -58,13877 +40,1266 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the Front Door Load Balancer" + "description": "The JSON object that contains the properties required to create an endpoint." }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/frontDoors_backendPools_childResource" - }, - { - "$ref": "#/definitions/frontDoors_loadBalancingSettings_childResource" - }, - { - "$ref": "#/definitions/frontDoors_healthProbeSettings_childResource" - }, - { - "$ref": "#/definitions/frontDoors_routingRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors" - }, - "frontDoors_backendPools": { - "type": "object", - "properties": { - "name": { + "tags": { "oneOf": [ { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Name of the Backend Pool which is unique within the Front Door." + "description": "Resource tags." }, "type": { "type": "string", "enum": [ - "Microsoft.Network/frontDoors/backendPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" + "Microsoft.Network/frontDoors" ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendPoolProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Front Door Backend Pool" } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/frontDoors/backendPools" + "description": "Microsoft.Network/frontDoors" }, - "frontDoors_healthProbeSettings": { + "FrontDoorWebApplicationFirewallPolicies": { "type": "object", "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the health probe settings which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/frontDoors/healthProbeSettings" - ] - }, "apiVersion": { "type": "string", "enum": [ "2018-08-01" ] }, - "id": { + "etag": { "type": "string", - "description": "Resource ID." + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, + "location": { + "type": "string", + "description": "Resource location." + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "The name of the resource group." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/HealthProbeSettingsProperties" + "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the health probe settings" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors/healthProbeSettings" - }, - "frontDoors_loadBalancingSettings": { - "type": "object", - "properties": { - "name": { + "description": "Defines web application firewall policy properties" + }, + "tags": { "oneOf": [ { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Name of the load balancing settings which is unique within the Front Door." + "description": "Resource tags." }, "type": { "type": "string", "enum": [ - "Microsoft.Network/frontDoors/loadBalancingSettings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" + "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingSettingsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancing settings" } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/frontDoors/loadBalancingSettings" - }, - "frontDoors_routingRules": { + "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + } + }, + "definitions": { + "AzureManagedOverrideRuleGroup": { "type": "object", "properties": { - "name": { + "action": { "oneOf": [ { "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" + "enum": [ + "Allow", + "Block", + "Log" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Name of the Routing Rule which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/frontDoors/routingRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "id": { - "type": "string", - "description": "Resource ID." + "description": "Type of Actions." }, - "properties": { + "ruleGroupOverride": { "oneOf": [ { - "$ref": "#/definitions/RoutingRuleProperties" + "type": "string", + "enum": [ + "SqlInjection", + "XSS" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the Front Door Routing Rule" + "description": "Describes override rule group." } }, "required": [ - "name", - "type", - "apiVersion", - "properties" + "action", + "ruleGroupOverride" ], - "description": "Microsoft.Network/frontDoors/routingRules" + "description": "Defines contents of a web application rule" }, - "frontDoorWebApplicationFirewallPolicies": { + "AzureManagedRuleSet": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { + "ruleGroupOverrides": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" + "type": "array", + "items": { + "$ref": "#/definitions/AzureManagedOverrideRuleGroup" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the web application firewall policy." + "description": "List of azure managed provider override configuration (optional)" }, - "etag": { + "ruleSetType": { "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." + "enum": [ + "AzureManagedRuleSet" + ] } }, "required": [ - "name", - "type", - "apiVersion", - "properties" + "ruleSetType" ], - "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + "description": "Describes azure managed provider." }, - "applicationGateways": { + "Backend": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, - "apiVersion": { + "address": { "type": "string", - "enum": [ - "2018-08-01" - ] + "description": "Location of the backend (IP address or FQDN)" }, - "location": { + "backendHostHeader": { "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationGateways" - }, - "applicationSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application security group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" - }, - "connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway connection." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/connections" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "interfaceEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the interface endpoint." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/interfaceEndpoints" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "virtualWans_p2sVpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AzureManagedOverrideRuleGroup": { - "type": "object", - "properties": { - "ruleGroupOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "SqlInjection", - "XSS" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes overrideruleGroup." - }, - "action": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Actions." - } - }, - "required": [ - "ruleGroupOverride", - "action" - ], - "description": "Defines contents of a web application rule" - }, - "AzureManagedRuleSet": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleSetType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzureManagedRuleSet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureManagedOverrideRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of azure managed provider override configuration (optional)" - }, - "ruleSetType": { - "type": "string" - } - }, - "required": [ - "ruleSetType" - ], - "description": "Describes azure managed provider." - }, - "Backend": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "Location of the backend (IP address or FQDN)" - }, - "httpPort": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP TCP port number. Must be between 1 and 65535." - }, - "httpsPort": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTPS TCP port number. Must be between 1 and 65535." - }, - "enabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 5 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." - }, - "weight": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 1000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Weight of this endpoint for load balancing purposes." - }, - "backendHostHeader": { - "type": "string", - "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." - } - }, - "description": "Backend address of a frontDoor load balancer." - }, - "BackendPool": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendPoolProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Front Door Backend Pool" - }, - "name": { - "type": "string", - "description": "Resource name." - } - }, - "description": "A backend pool is a collection of backends that can be routed to." - }, - "BackendPoolProperties": { - "type": "object", - "properties": { - "backends": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Backend" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of backends for this pool" - }, - "loadBalancingSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Load balancing settings for a backend pool" - }, - "healthProbeSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "L7 health probe settings for a backend pool" - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status." - } - }, - "description": "The JSON object that contains the properties required to create a routing rule." - }, - "CacheConfiguration": { - "type": "object", - "properties": { - "queryParameterStripDirective": { - "oneOf": [ - { - "type": "string", - "enum": [ - "StripNone", - "StripAll" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Treatment of URL query terms when forming the cache key." - }, - "dynamicCompression": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to use dynamic compression for cached content." - } - }, - "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." - }, - "CustomRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value" - }, - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MatchRule", - "RateLimitRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes type of rule." - }, - "rateLimitDurationInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines rate limit duration. Default - 1 minute" - }, - "rateLimitThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines rate limit thresold" - }, - "matchConditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchCondition1" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match conditions" - }, - "action": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Actions." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Uppercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms" - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule" - }, - "CustomRules": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/CustomRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules" - } - }, - "description": "Defines contents of custom rules" - }, - "FrontDoorProperties": { - "type": "object", - "properties": { - "friendlyName": { - "type": "string", - "description": "A friendly name for the frontDoor" - }, - "routingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing rules associated with this Front Door." - }, - "loadBalancingSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingSettingsModel" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Load balancing settings associated with this Front Door instance." - }, - "healthProbeSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HealthProbeSettingsModel" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Health probe settings associated with this Front Door instance." - }, - "backendPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend pools available to routing rules." - }, - "frontendEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend endpoints available to routing rules." - }, - "enabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status of the Front Door." - } - }, - "description": "The JSON object that contains the properties required to create an endpoint." - }, - "frontDoors_backendPools_childResource": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the Backend Pool which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "backendPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendPoolProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Front Door Backend Pool" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors/backendPools" - }, - "frontDoors_healthProbeSettings_childResource": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the health probe settings which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "healthProbeSettings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HealthProbeSettingsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the health probe settings" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors/healthProbeSettings" - }, - "frontDoors_loadBalancingSettings_childResource": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the load balancing settings which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "loadBalancingSettings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingSettingsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancing settings" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors/loadBalancingSettings" - }, - "frontDoors_routingRules_childResource": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of the Routing Rule which is unique within the Front Door." - }, - "type": { - "type": "string", - "enum": [ - "routingRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Front Door Routing Rule" - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/frontDoors/routingRules" - }, - "FrontendEndpoint": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Frontend endpoint" - }, - "name": { - "type": "string", - "description": "Resource name." - } - }, - "description": "A frontend endpoint used for routing." - }, - "FrontendEndpointProperties": { - "type": "object", - "properties": { - "hostName": { - "type": "string", - "description": "The host name of the frontendEndpoint. Must be a domain name." - }, - "sessionAffinityEnabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." - }, - "sessionAffinityTtlSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." - }, - "webApplicationFirewallPolicyLink": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the Web Application Firewall policy for each host (if applicable)" - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status." - } - }, - "description": "The JSON object that contains the properties required to create a frontend endpoint." - }, - "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "description": "Defines the Web Application Firewall policy for each host (if applicable)" - }, - "HealthProbeSettingsModel": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HealthProbeSettingsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the health probe settings" - }, - "name": { - "type": "string", - "description": "Resource name." - } - }, - "description": "Load balancing settings for a backend pool" - }, - "HealthProbeSettingsProperties": { - "type": "object", - "properties": { - "path": { - "type": "string", - "description": "The path to use for the health probe. Default is /" - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol scheme to use for this probe." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds between health probes." - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status." - } - }, - "description": "The JSON object that contains the properties required to create a health probe settings." - }, - "LoadBalancingSettingsModel": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingSettingsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancing settings" - }, - "name": { - "type": "string", - "description": "Resource name." - } - }, - "description": "Load balancing settings for a backend pool" - }, - "LoadBalancingSettingsProperties": { - "type": "object", - "properties": { - "sampleSize": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of samples to consider for load balancing decisions" - }, - "successfulSamplesRequired": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of samples within the sample period that must succeed" - }, - "additionalLatencyMilliseconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status." - } - }, - "description": "The JSON object that contains the properties required to create load balancing settings" - }, - "ManagedRuleSet": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleSetType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Unknown" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/AzureManagedRuleSet" - } - ], - "properties": { - "ruleSetType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzureManagedRuleSet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes priority of the rule" - }, - "version": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "defines version of the ruleset" - }, - "ruleSetType": { - "type": "string" - } - }, - "required": [ - "ruleSetType" - ], - "description": "Base class for all types of ManagedRuleSet." - }, - "ManagedRuleSets": { - "type": "object", - "properties": { - "ruleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules" - } - }, - "description": "Defines ManagedRuleSets - array of managedRuleSet" - }, - "MatchCondition1": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeader", - "RequestBody" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "Name of selector in RequestHeader or RequestBody to be matched" - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Any", - "IPMatch", - "GeoMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes operator to be matched." - }, - "negateCondition": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes if this is negate condition or not" - }, - "matchValue": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value" - } - }, - "required": [ - "matchVariable", - "operator", - "matchValue" - ], - "description": "Define match conditions" - }, - "PolicySettings": { - "type": "object", - "properties": { - "enabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "describes if the policy is in enabled state or disabled state." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes if it is in detection mode or prevention mode at policy level." - } - }, - "description": "Defines contents of a web application firewall global configuration" - }, - "RoutingRule": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Front Door Routing Rule" - }, - "name": { - "type": "string", - "description": "Resource name." - } - }, - "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." - }, - "RoutingRuleProperties": { - "type": "object", - "properties": { - "frontendEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend endpoints associated with this rule" - }, - "acceptedProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Http", - "Https" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol schemes to match for this rule" - }, - "patternsToMatch": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The route patterns of the rule." - }, - "customForwardingPath": { - "type": "string", - "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." - }, - "forwardingProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpOnly", - "HttpsOnly", - "MatchRequest" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol this rule will use when forwarding traffic to backends." - }, - "cacheConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/CacheConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The caching configuration associated with this rule." - }, - "backendPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to the BackendPool which this rule routes to." - }, - "enabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." - }, - "resourceState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Creating", - "Enabling", - "Enabled", - "Disabling", - "Disabled", - "Deleting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource status." - } - }, - "description": "The JSON object that contains the properties required to create a routing rule." - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "policySettings": { - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes policySettings for policy" - }, - "customRules": { - "oneOf": [ - { - "$ref": "#/definitions/CustomRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes custom rules inside the policy" - }, - "managedRules": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedRuleSets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes managed rules inside the policy" - } - }, - "description": "Defines web application firewall policy properties" - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway instances" - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address" - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of references to IPs defined in network interfaces." - }, - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses" - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "PrivateIP allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port" - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "provisioningState": { - "type": "string", - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match" - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:" - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of application the gateway resource." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "resourceGuid": { - "type": "string", - "description": "Resource GUID property of the application gateway resource." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway. " - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway. " - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway" - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "publicCertData": { - "type": "string", - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyvaultSecretId": { - "type": "string", - "description": "KeyVault Secret Id for certificate." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "type": { - "type": "string", - "description": "Type of the resource." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - }, - "provisioningState": { - "type": "string", - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maxium request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maxium request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 500 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maxium file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorization key." - }, - "authorizationUseStatus": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Available", - "InUse" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - } - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection" - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The Firewall Internal Load Balancer IP to be used as the next hop in User Defined Routes." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource" - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection" - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection" - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "provisioningState": { - "type": "string", - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of the backend address pool." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - } - }, - "description": "BGP settings details" - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - } - }, - "required": [ - "source", - "destination" - ], - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "Container": { - "description": "Reference to container resource in remote resource provider." - }, - "ContainerNetworkInterface": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Container network interface child resource." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Container network interface configruation child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "ContainerNetworkInterfaceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the container network interface IP configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "The ip configuration for a container network interface." - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration." - }, - "ContainerNetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration from which this container network interface is created." - }, - "container": { - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the conatinaer to which this container network interface is attached." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the ip configuration on this container nic." - } - } - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "type": "object", - "properties": { - } - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "EndpointService": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "A unique identifier of the service being referenced by the interface endpoint." - } - }, - "description": "Identifies the service being brought into the virtual network." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - } - } - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Spepcified for microsoft peering" - }, - "advertisedPublicPrefixesState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringId": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "The ID of the ExpressRoute circuit peering." - } - }, - "description": "ExpressRoute circuit peering identifier." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "azureASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure ASN." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "primaryAzurePort": { - "type": "string", - "description": "The primary port." - }, - "secondaryAzurePort": { - "type": "string", - "description": "The secondary port." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets peering stats." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "lastModifiedBy": { - "type": "string", - "description": "Gets whether the provider or the customer last modified the peering." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - }, - "connections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of circuit connections associated with Azure Private Peering for this circuit." - } - } - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations" - }, - "circuitProvisioningState": { - "type": "string", - "description": "The CircuitProvisioningState state of the resource." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceKey": { - "type": "string", - "description": "The ServiceKey." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "allowGlobalReach": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable Global Reach on the circuit." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "ExpressRouteCircuitReference": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Corresponding Express Route Circuit Id." - } - } - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Basic'." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "lastModifiedBy": { - "type": "string", - "description": "Gets whether the provider or the customer last modified the peering." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - } - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The peering location of the ExpressRoute circuit." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The circuit bandwidth In Mbps." - }, - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit" - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties" - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps" - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource" - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Public IP Prefix resource." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HubVirtualNetworkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "HubVirtualNetworkConnection Resource." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security" - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Parameters for HubVirtualNetworkConnection" - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "InterfaceEndpointProperties": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint." - }, - "endpointService": { - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to the service being brought into the virtual network." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - } - }, - "description": "Properties of the interface endpoint." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource to create a contatainer network interface ip configruation." - } - }, - "description": "IP configruation profile properties." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Groups used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Groups used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection" - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "Gets or sets the ipTag type: Example FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc" - } - }, - "description": "Contains the IpTag associated with the object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer" - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer" - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning " - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer" - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the load balancer resource." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer" - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"" - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"" - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGateway": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "location", - "properties" - ], - "description": "A common class for general resource information" - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the LocalNetworkGateway resource." - } - }, - "description": "LocalNetworkGateway properties" - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "appliedDnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - }, - "internalFqdn": { - "type": "string", - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network." - }, - "internalDomainNameSuffix": { - "type": "string", - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "tapConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of TapConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "macAddress": { - "type": "string", - "description": "The MAC address of the network interface." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets whether this is a primary network interface on a virtual machine." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the network interface resource." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties. " - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration" - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Tap configuration in a Network Interface" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of child container network interfaces." - }, - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - }, - "defaultSecurityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The default security rules of network security group." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the network security group resource." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Outbound pool of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol - TCP, UDP or All." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound pool of the load balancer." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs" - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "p2SVpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents Address space for P2S VpnClient." - } - }, - "description": "Parameters for P2SVpnGateway" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Radius client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Radius client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." - } - }, - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "properties" - ], - "description": "Radius Server root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SVpnServerConfiguration Resource." - }, - "P2SVpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name." - }, - "vpnProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "vpnProtocols for the P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client root certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client revoked certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius Server root certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius client root certificate of P2SVpnServerConfiguration." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the P2SVpnServerConfiguration resource for for point to site client connection." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Parameters for P2SVpnServerConfiguration" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "VPN client revoked certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "Describes the storage location for a packet capture session." - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - }, - "provisioningState": { - "type": "string", - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. " - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address" - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the public IP resource." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address" - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - }, - "ipPrefix": { - "type": "string", - "description": "The allocated Prefix" - }, - "publicIPAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of all referenced PublicIPAddresses" - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the public IP prefix resource." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix" - }, - "ReferencedPublicIpAddress": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "The PublicIPAddress Reference" - } - } - }, - "ResourceNavigationLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource navigation link properties format." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "ResourceNavigationLink resource." - }, - "ResourceNavigationLinkFormat": { - "type": "object", - "properties": { - "linkedResourceType": { - "type": "string", - "description": "Resource type of the linked resource." - }, - "link": { - "type": "string", - "description": "Link to the external resource" - } - }, - "description": "Properties of ResourceNavigationLink." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Route resource" - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of references to express route circuit peerings." - } - }, - "description": "Route Filter Resource" - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource" - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule. Valid value is: 'Community'" - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']" - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource" - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource" - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "description": "Route Table resource" - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule" - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "*" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. " - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outcoming traffic. Possible values are: 'Inbound' and 'Outbound'." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceAssociationLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource navigation link properties format." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "ServiceAssociationLink resource." - }, - "ServiceAssociationLinkPropertiesFormat": { - "type": "object", - "properties": { - "linkedResourceType": { - "type": "string", - "description": "Resource type of the linked resource." - }, - "link": { - "type": "string", - "description": "Link to the external resource." - } - }, - "description": "Properties of ServiceAssociationLink." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)" - }, - "actions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the actions permitted to the service upon delegation" - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition" - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition" - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the resource." - } - }, - "description": "The service endpoint properties." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteTable resource." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "resourceNavigationLinks": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets an array of references to the external resources using subnet." - }, - "serviceAssociationLinks": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets an array of references to services injecting into this subnet." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets an array of references to the delegations on the subnet." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the resource." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "VirtualHubId": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription." - } - }, - "description": "Virtual Hub identifier." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs" - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub" - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub" - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub" - }, - "virtualNetworkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "list of all vnet connections with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "provisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the resource." - } - }, - "description": "Parameters for VirtualHub" - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "list of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route" - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "list of all routes." - } - }, - "description": "VirtualHub route table" - }, - "VirtualNetworkGateway": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - }, - "etag": { - "type": "string", - "description": "Gets a unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "location", - "properties" - ], - "description": "A common class for general resource information" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type. Possible values are: 'Ipsec','Vnet2Vnet','ExpressRoute', and 'VPNClient." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag" - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding" - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties" - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "IP configuration for virtual network gateway" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'." + "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." }, - "subnet": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the subnet resource." + "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { + "httpPort": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IP configurations for virtual network gateway." + "description": "The HTTP TCP port number. Must be between 1 and 65535." }, - "gatewayType": { + "httpsPort": { "oneOf": [ { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute" - ] + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'." + "description": "The HTTPS TCP port number. Must be between 1 and 65535." }, - "vpnType": { + "priority": { "oneOf": [ { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] + "type": "integer", + "minimum": 1, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'." + "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." }, - "enableBgp": { + "weight": { "oneOf": [ { - "type": "boolean" + "type": "integer", + "minimum": 1, + "maximum": 1000 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Whether BGP is enabled for this virtual network gateway or not." + "description": "Weight of this endpoint for load balancing purposes." + } + }, + "description": "Backend address of a frontDoor load balancer." + }, + "BackendPool": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." }, - "activeActive": { + "properties": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/BackendPoolProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "ActiveActive flag" - }, - "gatewayDefaultSite": { + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A backend pool is a collection of backends that can be routed to." + }, + "BackendPoolProperties": { + "type": "object", + "properties": { + "backends": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "$ref": "#/definitions/Backend" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." + "description": "The set of backends for this pool" }, - "sku": { + "healthProbeSettings": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkGatewaySku" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." + "description": "Reference to another subresource." }, - "vpnClientConfiguration": { + "loadBalancingSettings": { "oneOf": [ { - "$ref": "#/definitions/VpnClientConfiguration" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations." + "description": "Reference to another subresource." }, - "bgpSettings": { + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "resourceGuid": { - "type": "string", - "description": "The resource GUID property of the VirtualNetworkGateway resource." + "description": "Resource status." } }, - "description": "VirtualNetworkGateway properties" + "description": "The JSON object that contains the properties required to create a routing rule." }, - "VirtualNetworkGatewaySku": { + "CacheConfiguration": { "type": "object", "properties": { - "name": { + "dynamicCompression": { "oneOf": [ { "type": "string", "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" + "Enabled", + "Disabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Gateway SKU name." + "description": "Whether to use dynamic compression for cached content." }, - "tier": { + "queryParameterStripDirective": { "oneOf": [ { "type": "string", "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" + "StripNone", + "StripAll" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Gateway SKU tier." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The capacity." + "description": "Treatment of URL query terms when forming the cache key." } }, - "description": "VirtualNetworkGatewaySku details" + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "VirtualNetworkPeering": { + "CustomRule": { "type": "object", "properties": { - "properties": { + "action": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" + "type": "string", + "enum": [ + "Allow", + "Block", + "Log" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Type of Actions." }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { + "matchConditions": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/MatchCondition1" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space." + "description": "List of match conditions" + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource." }, - "allowForwardedTraffic": { + "priority": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed." + "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value" }, - "allowGatewayTransit": { + "rateLimitDurationInMinutes": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." + "description": "Defines rate limit duration. Default - 1 minute" }, - "useRemoteGateways": { + "rateLimitThreshold": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." + "description": "Defines rate limit threshold" }, - "remoteVirtualNetwork": { + "ruleType": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "MatchRule", + "RateLimitRule" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." + "description": "Describes type of rule." }, - "remoteAddressSpace": { + "transforms": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls", + "HtmlEntityDecode" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference of the remote virtual network address space." - }, - "peeringState": { + "description": "List of transforms" + } + }, + "required": [ + "action", + "matchConditions", + "priority", + "ruleType" + ], + "description": "Defines contents of a web application rule" + }, + "CustomRules": { + "type": "object", + "properties": { + "rules": { "oneOf": [ { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] + "type": "array", + "items": { + "$ref": "#/definitions/CustomRule" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the resource." + "description": "List of rules" } }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." + "description": "Defines contents of custom rules" }, - "VirtualNetworkPropertiesFormat": { + "FrontDoorProperties": { "type": "object", "properties": { - "addressSpace": { + "backendPools": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "type": "array", + "items": { + "$ref": "#/definitions/BackendPool" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." + "description": "Backend pools available to routing rules." }, - "dhcpOptions": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/DhcpOptions" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." + "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." + }, + "friendlyName": { + "type": "string", + "description": "A friendly name for the frontDoor" }, - "subnets": { + "frontendEndpoints": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/Subnet" + "$ref": "#/definitions/FrontendEndpoint" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of subnets in a Virtual Network." + "description": "Frontend endpoints available to routing rules." }, - "virtualNetworkPeerings": { + "healthProbeSettings": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VirtualNetworkPeering" + "$ref": "#/definitions/HealthProbeSettingsModel" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of peerings in a Virtual Network." - }, - "resourceGuid": { - "type": "string", - "description": "The resourceGuid property of the Virtual Network resource." - }, - "provisioningState": { - "type": "string", - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'." + "description": "Health probe settings associated with this Front Door instance." }, - "enableDdosProtection": { + "loadBalancingSettings": { "oneOf": [ { - "type": "boolean", - "default": false + "type": "array", + "items": { + "$ref": "#/definitions/LoadBalancingSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." + "description": "Load balancing settings associated with this Front Door instance." }, - "enableVmProtection": { + "resourceState": { "oneOf": [ { - "type": "boolean", - "default": false + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." + "description": "Resource status of the Front Door." }, - "ddosProtectionPlan": { + "routingRules": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "$ref": "#/definitions/RoutingRule" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The DDoS protection plan associated with the virtual network." + "description": "Routing rules associated with this Front Door." } }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." + "description": "The JSON object that contains the properties required to create an endpoint." }, - "virtualNetworks_subnets_childResource": { + "FrontendEndpoint": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "id": { "type": "string", - "enum": [ - "subnets" - ] + "description": "Resource ID." }, - "apiVersion": { + "name": { "type": "string", - "enum": [ - "2018-08-01" - ] + "description": "Resource name." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/SubnetPropertiesFormat" + "$ref": "#/definitions/FrontendEndpointProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the subnet." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." + "description": "The JSON object that contains the properties required to create a frontend endpoint." } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" + "description": "A frontend endpoint used for routing." }, - "virtualNetworks_virtualNetworkPeerings_childResource": { + "FrontendEndpointProperties": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { + "hostName": { "type": "string", - "enum": [ - "2018-08-01" - ] + "description": "The host name of the frontendEndpoint. Must be a domain name." }, - "properties": { + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network peering." + "description": "Resource status." }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { + "sessionAffinityEnabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap" + "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." }, - "destinationLoadBalancerFrontEndIPConfiguration": { + "sessionAffinityTtlSeconds": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap" + "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." }, - "destinationPort": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VXLAN destination port that will receive the tapped traffic." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" } }, - "description": "Virtual Network Tap properties." + "description": "The JSON object that contains the properties required to create a frontend endpoint." }, - "VirtualWanProperties": { + "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { "type": "object", "properties": { - "disableVpnEncryption": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Vpn encryption to be disabled or not." + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Defines the Web Application Firewall policy for each host (if applicable)" + }, + "HealthProbeSettingsModel": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." }, - "securityProviderName": { + "name": { "type": "string", - "description": "The Security Provider name." + "description": "Resource name." }, - "allowBranchToBranchTraffic": { + "properties": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/HealthProbeSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if branch to branch traffic is allowed." - }, - "allowVnetToVnetTraffic": { + "description": "The JSON object that contains the properties required to create a health probe settings." + } + }, + "description": "Load balancing settings for a backend pool" + }, + "HealthProbeSettingsProperties": { + "type": "object", + "properties": { + "intervalInSeconds": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if Vnet to Vnet traffic is allowed." + "description": "The number of seconds between health probes." + }, + "path": { + "type": "string", + "description": "The path to use for the health probe. Default is /" }, - "office365LocalBreakoutCategory": { + "protocol": { "oneOf": [ { "type": "string", "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" + "Http", + "Https" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The office local breakout category." - }, - "p2SVpnServerConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "list of all P2SVpnServerConfigurations associated with the virtual wan." + "description": "Protocol scheme to use for this probe." }, - "provisioningState": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The provisioning state of the resource." + "description": "Resource status." } }, - "description": "Parameters for VirtualWAN" + "description": "The JSON object that contains the properties required to create a health probe settings." }, - "virtualWans_p2sVpnServerConfigurations_childResource": { + "LoadBalancingSettingsModel": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "id": { "type": "string", - "enum": [ - "p2sVpnServerConfigurations" - ] + "description": "Resource ID." }, - "apiVersion": { + "name": { "type": "string", - "enum": [ - "2018-08-01" - ] + "description": "Resource name." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" + "$ref": "#/definitions/LoadBalancingSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } - ] + ], + "description": "The JSON object that contains the properties required to create load balancing settings" } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" + "description": "Load balancing settings for a backend pool" }, - "VpnClientConfiguration": { + "LoadBalancingSettingsProperties": { "type": "object", "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { + "additionalLatencyMilliseconds": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRootCertificate for virtual network gateway." + "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" }, - "vpnClientRevokedCertificates": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." + "description": "Resource status." }, - "vpnClientProtocols": { + "sampleSize": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientProtocols for Virtual network gateway." + "description": "The number of samples to consider for load balancing decisions" }, - "vpnClientIpsecPolicies": { + "successfulSamplesRequired": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." + "description": "The number of samples within the sample period that must succeed" } }, - "description": "VpnClientConfiguration for P2S client." + "description": "The JSON object that contains the properties required to create load balancing settings" }, - "VpnClientRevokedCertificate": { + "ManagedRuleSet": { "type": "object", + "oneOf": [ + { + "$ref": "#/definitions/AzureManagedRuleSet" + } + ], "properties": { - "properties": { + "priority": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Describes priority of the rule" }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." - } - }, - "description": "VPN client revoked certificate of virtual network gateway." - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { + "version": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "etag": { - "type": "string", - "description": "A unique read-only string that changes whenever the resource is updated." + "description": "defines version of the rule set" } }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway" + "description": "Base class for all types of ManagedRuleSet." }, - "VpnClientRootCertificatePropertiesFormat": { + "ManagedRuleSets": { "type": "object", "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." + "ruleSets": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleSet" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rules" } }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway" + "description": "Defines ManagedRuleSets - array of managedRuleSet" }, - "VpnConnection": { + "MatchCondition1": { "type": "object", "properties": { - "properties": { + "matchValue": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } - ] + ], + "description": "Match value" }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnConnection Resource." - }, - "VpnConnectionProperties": { - "type": "object", - "properties": { - "remoteVpnSite": { + "matchVariable": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestHeader", + "RequestBody" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site." + "description": "Match Variable." }, - "routingWeight": { + "negateCondition": { "oneOf": [ { - "type": "integer" + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "routing weight for vpn connection." + "description": "Describes if this is negate condition or not" }, - "connectionStatus": { + "operator": { "oneOf": [ { "type": "string", "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "Describes operator to be matched." }, - "vpnConnectionProtocolType": { + "selector": { + "type": "string", + "description": "Name of selector in RequestHeader or RequestBody to be matched" + } + }, + "required": [ + "matchValue", + "matchVariable", + "operator" + ], + "description": "Define match conditions" + }, + "PolicySettings": { + "type": "object", + "properties": { + "enabledState": { "oneOf": [ { "type": "string", "enum": [ - "IKEv2", - "IKEv1" + "Disabled", + "Enabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "describes if the policy is in enabled state or disabled state." }, - "connectionBandwidth": { + "mode": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Prevention", + "Detection" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." + "description": "Describes if it is in detection mode or prevention mode at policy level." + } + }, + "description": "Defines contents of a web application firewall global configuration" + }, + "RoutingRule": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." }, - "sharedKey": { + "name": { "type": "string", - "description": "SharedKey for the vpn connection." + "description": "Resource name." }, - "enableBgp": { + "properties": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/RoutingRuleProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag" - }, - "ipsecPolicies": { + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." + }, + "RoutingRuleProperties": { + "type": "object", + "properties": { + "acceptedProtocols": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "type": "string", + "enum": [ + "Http", + "Https" + ] } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "Protocol schemes to match for this rule" }, - "enableRateLimiting": { + "backendPool": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag" + "description": "Reference to another subresource." }, - "enableInternetSecurity": { + "cacheConfiguration": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/CacheConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable internet security" + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." + }, + "customForwardingPath": { + "type": "string", + "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." }, - "provisioningState": { + "enabledState": { "oneOf": [ { "type": "string", "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" + "Enabled", + "Disabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The provisioning state of the resource." - } - }, - "description": "Parameters for VpnConnection" - }, - "VpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { + "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." + }, + "forwardingProtocol": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualHub to which the gateway belongs" + "description": "Protocol this rule will use when forwarding traffic to backends." }, - "connections": { + "frontendEndpoints": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnConnection" + "$ref": "#/definitions/SubResource" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "list of all vpn connections to the gateway." + "description": "Frontend endpoints associated with this rule" }, - "bgpSettings": { + "patternsToMatch": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Local network gateway's BGP speaker settings." + "description": "The route patterns of the rule." }, - "provisioningState": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The provisioning state of the resource." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this vpn gateway." + "description": "Resource status." } }, - "description": "Parameters for VpnGateway" + "description": "The JSON object that contains the properties required to create a routing rule." }, - "vpnGateways_vpnConnections_childResource": { + "SubResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] - }, - "apiVersion": { + "id": { "type": "string", - "enum": [ - "2018-08-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] + "description": "Resource ID." } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" + "description": "Reference to another subresource." }, - "VpnSiteProperties": { + "WebApplicationFirewallPolicyPropertiesFormat": { "type": "object", "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the vpnSite belongs" - }, - "deviceProperties": { - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The device properties" - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." - }, - "siteKey": { - "type": "string", - "description": "The key for vpn-site that can be used for connections." - }, - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges." - }, - "bgpProperties": { + "customRules": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "$ref": "#/definitions/CustomRules" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "Defines contents of custom rules" }, - "provisioningState": { + "managedRules": { "oneOf": [ { - "type": "string", - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ] + "$ref": "#/definitions/ManagedRuleSets" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The provisioning state of the resource." + "description": "Defines ManagedRuleSets - array of managedRuleSet" }, - "isSecuritySite": { + "policySettings": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/PolicySettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag" + "description": "Defines contents of a web application firewall global configuration" } }, - "description": "Parameters for VpnSite" + "description": "Defines web application firewall policy properties" } } } diff --git a/schemas/2018-09-01/Microsoft.Network.json b/schemas/2018-09-01/Microsoft.Network.json index a767e87c8e..8204deec54 100644 --- a/schemas/2018-09-01/Microsoft.Network.json +++ b/schemas/2018-09-01/Microsoft.Network.json @@ -1,1260 +1,1292 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-09-01/Microsoft.Network.json#", - "$schema": "http://json-schema.org/draft-04/schema#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "resourceDefinitions": { - "privateDnsZones": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "etag": { - "type": "string", - "description": "The ETag of the Private DNS zone." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateZoneProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Private DNS zone." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateDnsZones_virtualNetworkLinks_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_A_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_AAAA_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_CNAME_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_MX_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_PTR_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_SOA_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_SRV_childResource" - }, - { - "$ref": "#/definitions/privateDnsZones_TXT_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones" - }, - "privateDnsZones_virtualNetworkLinks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/virtualNetworkLinks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "etag": { - "type": "string", - "description": "The etag of the virtual network link." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the virtual network link." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" - }, - "privateDnsZones_A": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/A" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/A" - }, - "privateDnsZones_AAAA": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/AAAA" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/AAAA" - }, - "privateDnsZones_CNAME": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/CNAME" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/CNAME" - }, - "privateDnsZones_MX": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/MX" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/MX" - }, - "privateDnsZones_PTR": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/PTR" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/PTR" - }, - "privateDnsZones_SOA": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/SOA" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/SOA" - }, - "privateDnsZones_SRV": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/SRV" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/SRV" - }, - "privateDnsZones_TXT": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/TXT" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/TXT" - } - }, - "definitions": { - "privateDnsZones_virtualNetworkLinks_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateDnsZones/virtualNetworkLinks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "etag": { - "type": "string", - "description": "The etag of the virtual network link." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the virtual network link." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" - }, - "privateDnsZones_A_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "A" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/A" - }, - "privateDnsZones_AAAA_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "AAAA" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/AAAA" - }, - "privateDnsZones_CNAME_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "CNAME" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/CNAME" - }, - "privateDnsZones_MX_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "MX" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/MX" - }, - "privateDnsZones_PTR_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "PTR" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/PTR" - }, - "privateDnsZones_SOA_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "SOA" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/SOA" - }, - "privateDnsZones_SRV_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "SRV" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/SRV" - }, - "privateDnsZones_TXT_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "TXT" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2018-09-01" - ] - }, - "etag": { - "type": "string", - "description": "The etag of the record set." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RecordSetProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the record set." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateDnsZones/TXT" - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "description": "A reference to a another resource." - }, - "ARecord": { - "type": "object", - "properties": { - "ipv4Address": { - "type": "string", - "description": "The IPv4 address of this A record." - } - }, - "description": "An A record." - }, - "AaaaRecord": { - "type": "object", - "properties": { - "ipv6Address": { - "type": "string", - "description": "The IPv6 address of this AAAA record." - } - }, - "description": "An AAAA record." - }, - "CnameRecord": { - "type": "object", - "properties": { - "cname": { - "type": "string", - "description": "The canonical name for this CNAME record." - } - }, - "description": "A CNAME record." - }, - "MxRecord": { - "type": "object", - "properties": { - "preference": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preference value for this MX record." - }, - "exchange": { - "type": "string", - "description": "The domain name of the mail host for this MX record." - } - }, - "description": "An MX record." - }, - "PtrRecord": { - "type": "object", - "properties": { - "ptrdname": { - "type": "string", - "description": "The PTR target domain name for this PTR record." - } - }, - "description": "A PTR record." - }, - "SoaRecord": { - "type": "object", - "properties": { - "host": { - "type": "string", - "description": "The domain name of the authoritative name server for this SOA record." - }, - "email": { - "type": "string", - "description": "The email contact for this SOA record." - }, - "serialNumber": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The serial number for this SOA record." - }, - "refreshTime": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The refresh value for this SOA record." - }, - "retryTime": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The retry time for this SOA record." - }, - "expireTime": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expire time for this SOA record." - }, - "minimumTtl": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The minimum value for this SOA record. By convention this is used to determine the negative caching duration." - } - }, - "description": "An SOA record." - }, - "SrvRecord": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority value for this SRV record." - }, - "weight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight value for this SRV record." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port value for this SRV record." - }, - "target": { - "type": "string", - "description": "The target domain name for this SRV record." - } - }, - "description": "An SRV record." - }, - "TxtRecord": { - "type": "object", - "properties": { - "value": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The text value of this TXT record." - } - }, - "description": "A TXT record." - }, - "RecordSetProperties": { - "type": "object", - "properties": { - "metadata": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The metadata attached to the record set." - }, - "ttl": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The TTL (time-to-live) of the records in the record set." - }, - "aRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ARecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of A records in the record set." - }, - "aaaaRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AaaaRecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of AAAA records in the record set." - }, - "cnameRecord": { - "oneOf": [ - { - "$ref": "#/definitions/CnameRecord" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CNAME record in the record set." - }, - "mxRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MxRecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of MX records in the record set." - }, - "ptrRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PtrRecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of PTR records in the record set." - }, - "soaRecord": { - "oneOf": [ - { - "$ref": "#/definitions/SoaRecord" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SOA record in the record set." - }, - "srvRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SrvRecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of SRV records in the record set." - }, - "txtRecords": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TxtRecord" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of TXT records in the record set." - } - }, - "description": "Represents the properties of the records in the record set." - }, - "VirtualNetworkLinkProperties": { - "type": "object", - "properties": { - "virtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the virtual network." - }, - "registrationEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Is auto-registration of virtual machine records in the virtual network in the Private DNS zone enabled?" - } - }, - "description": "Represents the properties of the virtual network link to the Private DNS zone." - }, - "PrivateZoneProperties": { - "description": "Represents the properties of the Private DNS zone." - } - } - } +{ + "id": "https://schema.management.azure.com/schemas/2018-09-01/Microsoft.Network.json#", + "$schema": "http://json-schema.org/draft-04/schema#", + "title": "Microsoft.Network", + "description": "Microsoft Network Resource Types", + "resourceDefinitions": { + "privateDnsZones": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the zone." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the Private DNS zone (without a terminating dot)." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/PrivateZoneProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/privateDnsZones_virtualNetworkLinks_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_A_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_AAAA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_CNAME_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_MX_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_PTR_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SOA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SRV_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_TXT_childResource" + } + ] + } + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones" + }, + "privateDnsZones_A": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/A" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/A" + }, + "privateDnsZones_AAAA": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/AAAA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/AAAA" + }, + "privateDnsZones_CNAME": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/CNAME" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/CNAME" + }, + "privateDnsZones_MX": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/MX" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/MX" + }, + "privateDnsZones_PTR": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/PTR" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/PTR" + }, + "privateDnsZones_SOA": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SOA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SOA" + }, + "privateDnsZones_SRV": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SRV" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SRV" + }, + "privateDnsZones_TXT": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/TXT" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/TXT" + }, + "privateDnsZones_virtualNetworkLinks": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/VirtualNetworkLinkProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + } + }, + "definitions": { + "AaaaRecord": { + "type": "object", + "properties": { + "ipv6Address": { + "type": "string", + "description": "The IPv6 address of this AAAA record." + } + }, + "description": "An AAAA record." + }, + "ARecord": { + "type": "object", + "properties": { + "ipv4Address": { + "type": "string", + "description": "The IPv4 address of this A record." + } + }, + "description": "An A record." + }, + "CnameRecord": { + "type": "object", + "properties": { + "cname": { + "type": "string", + "description": "The canonical name for this CNAME record." + } + }, + "description": "A CNAME record." + }, + "MxRecord": { + "type": "object", + "properties": { + "exchange": { + "type": "string", + "description": "The domain name of the mail host for this MX record." + }, + "preference": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The preference value for this MX record." + } + }, + "description": "An MX record." + }, + "privateDnsZones_AAAA_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "AAAA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/AAAA" + }, + "privateDnsZones_A_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "A" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/A" + }, + "privateDnsZones_CNAME_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "CNAME" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/CNAME" + }, + "privateDnsZones_MX_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "MX" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/MX" + }, + "privateDnsZones_PTR_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "PTR" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/PTR" + }, + "privateDnsZones_SOA_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "SOA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SOA" + }, + "privateDnsZones_SRV_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "SRV" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SRV" + }, + "privateDnsZones_TXT_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "TXT" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/TXT" + }, + "privateDnsZones_virtualNetworkLinks_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2018-09-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/VirtualNetworkLinkProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "virtualNetworkLinks" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + }, + "PrivateZoneProperties": { + "type": "object", + "properties": {}, + "description": "Represents the properties of the Private DNS zone." + }, + "PtrRecord": { + "type": "object", + "properties": { + "ptrdname": { + "type": "string", + "description": "The PTR target domain name for this PTR record." + } + }, + "description": "A PTR record." + }, + "RecordSetProperties": { + "type": "object", + "properties": { + "aaaaRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/AaaaRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of AAAA records in the record set." + }, + "aRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ARecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of A records in the record set." + }, + "cnameRecord": { + "oneOf": [ + { + "$ref": "#/definitions/CnameRecord" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "A CNAME record." + }, + "metadata": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The metadata attached to the record set." + }, + "mxRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/MxRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of MX records in the record set." + }, + "ptrRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/PtrRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of PTR records in the record set." + }, + "soaRecord": { + "oneOf": [ + { + "$ref": "#/definitions/SoaRecord" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "An SOA record." + }, + "srvRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/SrvRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of SRV records in the record set." + }, + "ttl": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The TTL (time-to-live) of the records in the record set." + }, + "txtRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/TxtRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of TXT records in the record set." + } + }, + "description": "Represents the properties of the records in the record set." + }, + "SoaRecord": { + "type": "object", + "properties": { + "email": { + "type": "string", + "description": "The email contact for this SOA record." + }, + "expireTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The expire time for this SOA record." + }, + "host": { + "type": "string", + "description": "The domain name of the authoritative name server for this SOA record." + }, + "minimumTtl": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The minimum value for this SOA record. By convention this is used to determine the negative caching duration." + }, + "refreshTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The refresh value for this SOA record." + }, + "retryTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The retry time for this SOA record." + }, + "serialNumber": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The serial number for this SOA record." + } + }, + "description": "An SOA record." + }, + "SrvRecord": { + "type": "object", + "properties": { + "port": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The port value for this SRV record." + }, + "priority": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The priority value for this SRV record." + }, + "target": { + "type": "string", + "description": "The target domain name for this SRV record." + }, + "weight": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The weight value for this SRV record." + } + }, + "description": "An SRV record." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." + }, + "TxtRecord": { + "type": "object", + "properties": { + "value": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The text value of this TXT record." + } + }, + "description": "A TXT record." + }, + "VirtualNetworkLinkProperties": { + "type": "object", + "properties": { + "registrationEnabled": { + "oneOf": [ + { + "type": "boolean" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Is auto-registration of virtual machine records in the virtual network in the Private DNS zone enabled?" + }, + "virtualNetwork": { + "oneOf": [ + { + "$ref": "#/definitions/SubResource" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Reference to another subresource." + } + }, + "description": "Represents the properties of the Private DNS zone." + } + } +} diff --git a/schemas/2019-03-01/Microsoft.Network.json b/schemas/2019-03-01/Microsoft.Network.json new file mode 100644 index 0000000000..f086e9c863 --- /dev/null +++ b/schemas/2019-03-01/Microsoft.Network.json @@ -0,0 +1,542 @@ +{ + "id": "https://schema.management.azure.com/schemas/2019-03-01/Microsoft.Network.json#", + "$schema": "http://json-schema.org/draft-04/schema#", + "title": "Microsoft.Network", + "description": "Microsoft Network Resource Types", + "resourceDefinitions": { + "FrontDoorWebApplicationFirewallPolicies": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2019-03-01" + ] + }, + "etag": { + "type": "string", + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, + "location": { + "type": "string", + "description": "Resource location." + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "The name of the Web Application Firewall Policy." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/WebApplicationFirewallPolicyProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines web application firewall policy properties." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + } + }, + "definitions": { + "CustomRule": { + "type": "object", + "properties": { + "action": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes what action to be applied when rule matches." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified." + }, + "matchConditions": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/MatchCondition" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of match conditions." + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "Describes the name of the rule." + }, + "priority": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + }, + "rateLimitDurationInMinutes": { + "oneOf": [ + { + "type": "integer", + "minimum": 0, + "maximum": 5 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Time window for resetting the rate limit count. Default is 1 minute." + }, + "rateLimitThreshold": { + "oneOf": [ + { + "type": "integer", + "minimum": 0 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Number of allowed requests per client within the time window." + }, + "ruleType": { + "oneOf": [ + { + "type": "string", + "enum": [ + "MatchRule", + "RateLimitRule" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes type of rule." + } + }, + "required": [ + "action", + "matchConditions", + "priority", + "ruleType" + ], + "description": "Defines contents of a web application rule" + }, + "CustomRuleList": { + "type": "object", + "properties": { + "rules": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/CustomRule" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rules" + } + }, + "description": "Defines contents of custom rules" + }, + "ManagedRuleGroupOverride": { + "type": "object", + "properties": { + "ruleGroupName": { + "type": "string", + "description": "Describes the managed rule group to override." + }, + "rules": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleOverride" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." + } + }, + "required": [ + "ruleGroupName" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleOverride": { + "type": "object", + "properties": { + "action": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes the override action to be applied when rule matches." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified." + }, + "ruleId": { + "type": "string", + "description": "Identifier for the managed rule." + } + }, + "required": [ + "ruleId" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleSet": { + "type": "object", + "properties": { + "ruleGroupOverrides": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleGroupOverride" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the rule group overrides to apply to the rule set." + }, + "ruleSetType": { + "type": "string", + "description": "Defines the rule set type to use." + }, + "ruleSetVersion": { + "type": "string", + "description": "Defines the version of the rule set to use." + } + }, + "required": [ + "ruleSetType", + "ruleSetVersion" + ], + "description": "Defines a managed rule set." + }, + "ManagedRuleSetList": { + "type": "object", + "properties": { + "managedRuleSets": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleSet" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rule sets." + } + }, + "description": "Defines the list of managed rule sets for the policy." + }, + "MatchCondition": { + "type": "object", + "properties": { + "matchValue": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of possible match values." + }, + "matchVariable": { + "oneOf": [ + { + "type": "string", + "enum": [ + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestHeader", + "RequestBody", + "Cookies", + "SocketAddr" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Request variable to compare with." + }, + "negateCondition": { + "oneOf": [ + { + "type": "boolean" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the result of this condition should be negated." + }, + "operator": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith", + "RegEx" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Comparison type to use for matching with the variable value." + }, + "selector": { + "type": "string", + "description": "Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null." + }, + "transforms": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of transforms." + } + }, + "required": [ + "matchValue", + "matchVariable", + "operator" + ], + "description": "Define a match condition." + }, + "PolicySettings": { + "type": "object", + "properties": { + "customBlockResponseBody": { + "oneOf": [ + { + "type": "string", + "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding." + }, + "customBlockResponseStatusCode": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response status code." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified." + }, + "mode": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Prevention", + "Detection" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if it is in detection mode or prevention mode at policy level." + }, + "redirectUrl": { + "type": "string", + "description": "If action type is redirect, this field represents redirect URL for the client." + } + }, + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + }, + "WebApplicationFirewallPolicyProperties": { + "type": "object", + "properties": { + "customRules": { + "oneOf": [ + { + "$ref": "#/definitions/CustomRuleList" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines contents of custom rules" + }, + "managedRules": { + "oneOf": [ + { + "$ref": "#/definitions/ManagedRuleSetList" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the list of managed rule sets for the policy." + }, + "policySettings": { + "oneOf": [ + { + "$ref": "#/definitions/PolicySettings" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + } + }, + "description": "Defines web application firewall policy properties." + } + } +} diff --git a/schemas/2019-04-01/Microsoft.Network.json b/schemas/2019-04-01/Microsoft.Network.json index 7aebcf6888..ec57b59fae 100644 --- a/schemas/2019-04-01/Microsoft.Network.json +++ b/schemas/2019-04-01/Microsoft.Network.json @@ -4,12511 +4,954 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "frontDoors": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of the application gateway, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationGateways" - }, - "ApplicationGatewayWebApplicationFirewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the web application firewall policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - }, - "applicationSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application security group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" - }, - "bastionHosts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, "apiVersion": { "type": "string", "enum": [ "2019-04-01" ] }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the bastion host resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/bastionHosts" - }, - "connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/connections" - }, - "ddosCustomPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS custom policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ddosCustomPolicies" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "virtualWans_p2sVpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this paramter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - } - }, - "description": "BGP settings details." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - } - }, - "required": [ - "source", - "destination" - ], - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets peering stats." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The peering location of the ExpressRoute circuit." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The circuit bandwidth In Mbps." - }, - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "It represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HubVirtualNetworkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "HubVirtualNetworkConnection Resource." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "Gets or sets the ipTag type: Example FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes if this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "Describes field of the matchVariable collection." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkWatcherPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "p2SVpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents Address space for P2S VpnClient." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents the custom routes specified by the customer for P2SVpnGateway and P2S VpnClient." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Radius client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Radius client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." - } - }, - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "Radius Server root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SVpnServerConfiguration Resource." - }, - "P2SVpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name." - }, - "vpnProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN protocols for the P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client root certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client revoked certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius Server root certificate of P2SVpnServerConfiguration." - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius client root certificate of P2SVpnServerConfiguration." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection." - } - }, - "description": "Parameters for P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VPN client revoked certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of P2SVpnServerConfiguration." - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "Describes the storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "enabledState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes if the policy is in enabled state or disabled state." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes if it is in detection mode or prevention mode at policy level." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - } - }, - "description": "Properties of the private endpoint." - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the private link service IP configuration." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gets an array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable private end point on the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable private link service on the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "virtualNetworkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vnet connections with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." - }, - "gatewayDefaultSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." - }, - "vpnClientConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - } - }, - "description": "VirtualNetworkGateway properties." - }, - "VirtualNetworkGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU name." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU tier." - } - }, - "description": "VirtualNetworkGatewaySku details." - }, - "VirtualNetworkPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." - }, - "useRemoteGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." - }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the remote virtual network address space." - }, - "peeringState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The status of the virtual network peering." - } - }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." - }, - "VirtualNetworkPropertiesFormat": { - "type": "object", - "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." - }, - "subnets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of subnets in a Virtual Network." + "location": { + "type": "string", + "description": "Resource location." }, - "virtualNetworkPeerings": { + "name": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - } + "type": "string", + "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9]?[a-zA-Z0-9])*$", + "minLength": 5, + "maxLength": 64 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of peerings in a Virtual Network." + "description": "Name of the Front Door which is globally unique." }, - "enableDdosProtection": { + "properties": { "oneOf": [ { - "type": "boolean", - "default": false + "$ref": "#/definitions/FrontDoorProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." + "description": "The JSON object that contains the properties required to create an endpoint." }, - "enableVmProtection": { + "tags": { "oneOf": [ { - "type": "boolean", - "default": false + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." + "description": "Resource tags." }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/frontDoors" + ] } }, "required": [ - "addressSpace" + "apiVersion", + "name", + "properties", + "type" ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { + "description": "Microsoft.Network/frontDoors" + } + }, + "definitions": { + "Backend": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "address": { "type": "string", - "enum": [ - "subnets" - ] + "description": "Location of the backend (IP address or FQDN)" }, - "apiVersion": { + "backendHostHeader": { "type": "string", - "enum": [ - "2019-04-01" - ] + "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." }, - "properties": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubnetPropertiesFormat" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] + "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." }, - "properties": { + "httpPort": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { + "description": "The HTTP TCP port number. Must be between 1 and 65535." + }, + "httpsPort": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." + "description": "The HTTPS TCP port number. Must be between 1 and 65535." }, - "destinationLoadBalancerFrontEndIPConfiguration": { + "priority": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "integer", + "minimum": 1, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." + "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." }, - "destinationPort": { + "weight": { "oneOf": [ { - "type": "integer" + "type": "integer", + "minimum": 1, + "maximum": 1000 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VXLAN destination port that will receive the tapped traffic." + "description": "Weight of this endpoint for load balancing purposes." } }, - "description": "Virtual Network Tap properties." + "description": "Backend address of a frontDoor load balancer." }, - "VirtualWanProperties": { + "BackendPool": { "type": "object", "properties": { - "disableVpnEncryption": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/BackendPoolProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Vpn encryption to be disabled or not." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "allowBranchToBranchTraffic": { + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A backend pool is a collection of backends that can be routed to." + }, + "BackendPoolProperties": { + "type": "object", + "properties": { + "backends": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/Backend" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if branch to branch traffic is allowed." + "description": "The set of backends for this pool" }, - "allowVnetToVnetTraffic": { + "healthProbeSettings": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if Vnet to Vnet traffic is allowed." + "description": "Reference to another subresource." }, - "office365LocalBreakoutCategory": { + "loadBalancingSettings": { "oneOf": [ { - "type": "string", - "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" - ] + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The office local breakout category." + "description": "Reference to another subresource." }, - "p2SVpnServerConfigurations": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan." + "description": "Resource status." } }, - "description": "Parameters for VirtualWAN." + "description": "The JSON object that contains the properties required to create a routing rule." }, - "virtualWans_p2sVpnServerConfigurations_childResource": { + "BackendPoolsSettings": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "p2sVpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-04-01" - ] - }, - "properties": { + "enforceCertificateNameCheck": { "oneOf": [ { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the P2SVpnServer configuration." + "description": "Whether to enforce certificate name check on HTTPS requests to all backend pools. No effect on non-HTTPS requests." } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" + "description": "Settings that apply to all backend pools." }, - "VpnClientConfiguration": { + "CacheConfiguration": { "type": "object", "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference of the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRootCertificate for virtual network gateway." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." - }, - "vpnClientProtocols": { + "dynamicCompression": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientProtocols for Virtual network gateway." + "description": "Whether to use dynamic compression for cached content." }, - "vpnClientIpsecPolicies": { + "queryParameterStripDirective": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "string", + "enum": [ + "StripNone", + "StripAll" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." + "description": "Treatment of URL query terms when forming the cache key." } }, - "description": "VpnClientConfiguration for P2S client." + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "VpnClientRevokedCertificate": { + "ForwardingConfiguration": { "type": "object", "properties": { - "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration" + ] + }, + "backendPool": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client revoked certificate." + "description": "Reference to another subresource." }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VPN client revoked certificate of virtual network gateway." - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { + "cacheConfiguration": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" + "$ref": "#/definitions/CacheConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client root certificate." + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { + "customForwardingPath": { "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway." - }, - "VpnConnection": { - "type": "object", - "properties": { - "properties": { + "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." + }, + "forwardingProtocol": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Protocol this rule will use when forwarding traffic to backends." } }, - "description": "VpnConnection Resource." + "required": [ + "@odata.type" + ], + "description": "Describes Forwarding Route." }, - "VpnConnectionProperties": { + "FrontDoorProperties": { "type": "object", "properties": { - "remoteVpnSite": { + "backendPools": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "$ref": "#/definitions/BackendPool" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site." + "description": "Backend pools available to routing rules." }, - "routingWeight": { + "backendPoolsSettings": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/BackendPoolsSettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Settings that apply to all backend pools." }, - "connectionStatus": { + "enabledState": { "oneOf": [ { "type": "string", "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" + "Enabled", + "Disabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." }, - "vpnConnectionProtocolType": { + "friendlyName": { + "type": "string", + "description": "A friendly name for the frontDoor" + }, + "frontendEndpoints": { "oneOf": [ { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] + "type": "array", + "items": { + "$ref": "#/definitions/FrontendEndpoint" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "Frontend endpoints available to routing rules." }, - "connectionBandwidth": { + "healthProbeSettings": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/HealthProbeSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." + "description": "Health probe settings associated with this Front Door instance." }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { + "loadBalancingSettings": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/LoadBalancingSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Load balancing settings associated with this Front Door instance." }, - "usePolicyBasedTrafficSelectors": { + "resourceState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." + "description": "Resource status of the Front Door." }, - "ipsecPolicies": { + "routingRules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "$ref": "#/definitions/RoutingRule" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "Routing rules associated with this Front Door." + } + }, + "description": "The JSON object that contains the properties required to create an endpoint." + }, + "FrontendEndpoint": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/FrontendEndpointProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a frontend endpoint." + } + }, + "description": "A frontend endpoint used for routing." + }, + "FrontendEndpointProperties": { + "type": "object", + "properties": { + "hostName": { + "type": "string", + "description": "The host name of the frontendEndpoint. Must be a domain name." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." }, - "enableRateLimiting": { + "sessionAffinityEnabledState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." }, - "enableInternetSecurity": { + "sessionAffinityTtlSeconds": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable internet security." + "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." }, - "useLocalAzureIpAddress": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" + } + }, + "description": "The JSON object that contains the properties required to create a frontend endpoint." + }, + "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." } }, - "description": "Parameters for VpnConnection." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" }, - "VpnGatewayProperties": { + "HealthProbeSettingsModel": { "type": "object", "properties": { - "virtualHub": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/HealthProbeSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualHub to which the gateway belongs." - }, - "connections": { + "description": "The JSON object that contains the properties required to create a health probe settings." + } + }, + "description": "Load balancing settings for a backend pool" + }, + "HealthProbeSettingsProperties": { + "type": "object", + "properties": { + "intervalInSeconds": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnConnection" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn connections to the gateway." + "description": "The number of seconds between health probes." }, - "bgpSettings": { + "path": { + "type": "string", + "description": "The path to use for the health probe. Default is /" + }, + "protocol": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "string", + "enum": [ + "Http", + "Https" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Local network gateway's BGP speaker settings." + "description": "Protocol scheme to use for this probe." }, - "vpnGatewayScaleUnit": { + "resourceState": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The scale unit for this vpn gateway." + "description": "Resource status." } }, - "description": "Parameters for VpnGateway." + "description": "The JSON object that contains the properties required to create a health probe settings." }, - "vpnGateways_vpnConnections_childResource": { + "LoadBalancingSettingsModel": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "id": { "type": "string", - "enum": [ - "vpnConnections" - ] + "description": "Resource ID." }, - "apiVersion": { + "name": { "type": "string", - "enum": [ - "2019-04-01" - ] + "description": "Resource name." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "$ref": "#/definitions/LoadBalancingSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN connection." + "description": "The JSON object that contains the properties required to create load balancing settings" } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" + "description": "Load balancing settings for a backend pool" }, - "VpnSiteProperties": { + "LoadBalancingSettingsProperties": { "type": "object", "properties": { - "virtualWan": { + "additionalLatencyMilliseconds": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualWAN to which the vpnSite belongs." + "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" }, - "deviceProperties": { + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/DeviceProperties" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." + "description": "Resource status." }, - "siteKey": { - "type": "string", - "description": "The key for vpn-site that can be used for connections." + "sampleSize": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The number of samples to consider for load balancing decisions" }, - "addressSpace": { + "successfulSamplesRequired": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The AddressSpace that contains an array of IP address ranges." + "description": "The number of samples within the sample period that must succeed" + } + }, + "description": "The JSON object that contains the properties required to create load balancing settings" + }, + "RedirectConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorRedirectConfiguration" + ] + }, + "customFragment": { + "type": "string", + "description": "Fragment to add to the redirect URL. Fragment is the part of the URL that comes after #. Do not include the #." + }, + "customHost": { + "type": "string", + "description": "Host to redirect. Leave empty to use the incoming host as the destination host." + }, + "customPath": { + "type": "string", + "description": "The full path to redirect. Path cannot be empty and must start with /. Leave empty to use the incoming path as destination path." }, - "bgpProperties": { + "customQueryString": { + "type": "string", + "description": "The set of query strings to be placed in the redirect URL. Setting this value would replace any existing query string; leave empty to preserve the incoming query string. Query string must be in = format. The first ? and & will be added automatically so do not include them in the front, but do separate multiple query strings with &." + }, + "redirectProtocol": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "The protocol of the destination to where the traffic is redirected." }, - "isSecuritySite": { + "redirectType": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Moved", + "Found", + "TemporaryRedirect", + "PermanentRedirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag." + "description": "The redirect type the rule will use when redirecting traffic." } }, - "description": "Parameters for VpnSite." + "required": [ + "@odata.type" + ], + "description": "Describes Redirect Route." + }, + "RouteConfiguration": { + "type": "object", + "oneOf": [ + { + "$ref": "#/definitions/ForwardingConfiguration" + }, + { + "$ref": "#/definitions/RedirectConfiguration" + } + ], + "properties": {}, + "description": "Base class for all types of Route." }, - "WebApplicationFirewallCustomRule": { + "RoutingRule": { "type": "object", "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, "name": { "type": "string", - "maxLength": 128, - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource." + "description": "Resource name." }, - "priority": { + "properties": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/RoutingRuleProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." + }, + "RoutingRuleProperties": { + "type": "object", + "properties": { + "acceptedProtocols": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string", + "enum": [ + "Http", + "Https" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + "description": "Protocol schemes to match for this rule" }, - "ruleType": { + "enabledState": { "oneOf": [ { "type": "string", "enum": [ - "MatchRule", - "Invalid" + "Enabled", + "Disabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes type of rule." + "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." }, - "matchConditions": { + "frontendEndpoints": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/MatchCondition" + "$ref": "#/definitions/SubResource" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of match conditions." + "description": "Frontend endpoints associated with this rule" }, - "action": { + "patternsToMatch": { "oneOf": [ { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Type of Actions." - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule." - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "policySettings": { + "description": "The route patterns of the rule." + }, + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/PolicySettings" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes policySettings for policy." + "description": "Resource status." }, - "customRules": { + "routeConfiguration": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } + "$ref": "#/definitions/RouteConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes custom rules inside the policy." + "description": "Base class for all types of Route." + } + }, + "description": "The JSON object that contains the properties required to create a routing rule." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." } }, - "description": "Defines web application firewall policy properties." + "description": "Reference to another subresource." } } } diff --git a/schemas/2019-05-01/Microsoft.Network.json b/schemas/2019-05-01/Microsoft.Network.json new file mode 100644 index 0000000000..2cdded9808 --- /dev/null +++ b/schemas/2019-05-01/Microsoft.Network.json @@ -0,0 +1,999 @@ +{ + "id": "https://schema.management.azure.com/schemas/2019-05-01/Microsoft.Network.json#", + "$schema": "http://json-schema.org/draft-04/schema#", + "title": "Microsoft.Network", + "description": "Microsoft Network Resource Types", + "resourceDefinitions": { + "frontDoors": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2019-05-01" + ] + }, + "location": { + "type": "string", + "description": "Resource location." + }, + "name": { + "oneOf": [ + { + "type": "string", + "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9]?[a-zA-Z0-9])*$", + "minLength": 5, + "maxLength": 64 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Name of the Front Door which is globally unique." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/FrontDoorProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create an endpoint." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/frontDoors" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/frontDoors" + } + }, + "definitions": { + "Backend": { + "type": "object", + "properties": { + "address": { + "type": "string", + "description": "Location of the backend (IP address or FQDN)" + }, + "backendHostHeader": { + "type": "string", + "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." + }, + "httpPort": { + "oneOf": [ + { + "type": "integer", + "minimum": 1, + "maximum": 65535 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The HTTP TCP port number. Must be between 1 and 65535." + }, + "httpsPort": { + "oneOf": [ + { + "type": "integer", + "minimum": 1, + "maximum": 65535 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The HTTPS TCP port number. Must be between 1 and 65535." + }, + "priority": { + "oneOf": [ + { + "type": "integer", + "minimum": 1, + "maximum": 5 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." + }, + "weight": { + "oneOf": [ + { + "type": "integer", + "minimum": 1, + "maximum": 1000 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Weight of this endpoint for load balancing purposes." + } + }, + "description": "Backend address of a frontDoor load balancer." + }, + "BackendPool": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/BackendPoolProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A backend pool is a collection of backends that can be routed to." + }, + "BackendPoolProperties": { + "type": "object", + "properties": { + "backends": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/Backend" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The set of backends for this pool" + }, + "healthProbeSettings": { + "oneOf": [ + { + "$ref": "#/definitions/SubResource" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Reference to another subresource." + }, + "loadBalancingSettings": { + "oneOf": [ + { + "$ref": "#/definitions/SubResource" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Reference to another subresource." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." + } + }, + "description": "The JSON object that contains the properties required to create a routing rule." + }, + "BackendPoolsSettings": { + "type": "object", + "properties": { + "enforceCertificateNameCheck": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to enforce certificate name check on HTTPS requests to all backend pools. No effect on non-HTTPS requests." + }, + "sendRecvTimeoutSeconds": { + "oneOf": [ + { + "type": "integer", + "minimum": 16 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Send and receive timeout on forwarding request to the backend. When timeout is reached, the request fails and returns." + } + }, + "description": "Settings that apply to all backend pools." + }, + "CacheConfiguration": { + "type": "object", + "properties": { + "dynamicCompression": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to use dynamic compression for cached content." + }, + "queryParameterStripDirective": { + "oneOf": [ + { + "type": "string", + "enum": [ + "StripNone", + "StripAll" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Treatment of URL query terms when forming the cache key." + } + }, + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." + }, + "ForwardingConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration" + ] + }, + "backendPool": { + "oneOf": [ + { + "$ref": "#/definitions/SubResource" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Reference to another subresource." + }, + "cacheConfiguration": { + "oneOf": [ + { + "$ref": "#/definitions/CacheConfiguration" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." + }, + "customForwardingPath": { + "type": "string", + "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." + }, + "forwardingProtocol": { + "oneOf": [ + { + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Protocol this rule will use when forwarding traffic to backends." + } + }, + "required": [ + "@odata.type" + ], + "description": "Describes Forwarding Route." + }, + "FrontDoorProperties": { + "type": "object", + "properties": { + "backendPools": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/BackendPool" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Backend pools available to routing rules." + }, + "backendPoolsSettings": { + "oneOf": [ + { + "$ref": "#/definitions/BackendPoolsSettings" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Settings that apply to all backend pools." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." + }, + "friendlyName": { + "type": "string", + "description": "A friendly name for the frontDoor" + }, + "frontendEndpoints": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/FrontendEndpoint" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Frontend endpoints available to routing rules." + }, + "healthProbeSettings": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/HealthProbeSettingsModel" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Health probe settings associated with this Front Door instance." + }, + "loadBalancingSettings": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/LoadBalancingSettingsModel" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Load balancing settings associated with this Front Door instance." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status of the Front Door." + }, + "routingRules": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/RoutingRule" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Routing rules associated with this Front Door." + } + }, + "description": "The JSON object that contains the properties required to create an endpoint." + }, + "FrontendEndpoint": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/FrontendEndpointProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a frontend endpoint." + } + }, + "description": "A frontend endpoint used for routing." + }, + "FrontendEndpointProperties": { + "type": "object", + "properties": { + "hostName": { + "type": "string", + "description": "The host name of the frontendEndpoint. Must be a domain name." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." + }, + "sessionAffinityEnabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." + }, + "sessionAffinityTtlSeconds": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." + }, + "webApplicationFirewallPolicyLink": { + "oneOf": [ + { + "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the Web Application Firewall policy for each host (if applicable)" + } + }, + "description": "The JSON object that contains the properties required to create a frontend endpoint." + }, + "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Defines the Web Application Firewall policy for each host (if applicable)" + }, + "HealthProbeSettingsModel": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/HealthProbeSettingsProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a health probe settings." + } + }, + "description": "Load balancing settings for a backend pool" + }, + "HealthProbeSettingsProperties": { + "type": "object", + "properties": { + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to enable health probes to be made against backends defined under backendPools. Health probes can only be disabled if there is a single enabled backend in single enabled backend pool." + }, + "healthProbeMethod": { + "oneOf": [ + { + "type": "string", + "enum": [ + "GET", + "HEAD" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Configures which HTTP method to use to probe the backends defined under backendPools." + }, + "intervalInSeconds": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The number of seconds between health probes." + }, + "path": { + "type": "string", + "description": "The path to use for the health probe. Default is /" + }, + "protocol": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Http", + "Https" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Protocol scheme to use for this probe." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." + } + }, + "description": "The JSON object that contains the properties required to create a health probe settings." + }, + "LoadBalancingSettingsModel": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/LoadBalancingSettingsProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create load balancing settings" + } + }, + "description": "Load balancing settings for a backend pool" + }, + "LoadBalancingSettingsProperties": { + "type": "object", + "properties": { + "additionalLatencyMilliseconds": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." + }, + "sampleSize": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The number of samples to consider for load balancing decisions" + }, + "successfulSamplesRequired": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The number of samples within the sample period that must succeed" + } + }, + "description": "The JSON object that contains the properties required to create load balancing settings" + }, + "RedirectConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorRedirectConfiguration" + ] + }, + "customFragment": { + "type": "string", + "description": "Fragment to add to the redirect URL. Fragment is the part of the URL that comes after #. Do not include the #." + }, + "customHost": { + "type": "string", + "description": "Host to redirect. Leave empty to use the incoming host as the destination host." + }, + "customPath": { + "type": "string", + "description": "The full path to redirect. Path cannot be empty and must start with /. Leave empty to use the incoming path as destination path." + }, + "customQueryString": { + "type": "string", + "description": "The set of query strings to be placed in the redirect URL. Setting this value would replace any existing query string; leave empty to preserve the incoming query string. Query string must be in = format. The first ? and & will be added automatically so do not include them in the front, but do separate multiple query strings with &." + }, + "redirectProtocol": { + "oneOf": [ + { + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The protocol of the destination to where the traffic is redirected." + }, + "redirectType": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Moved", + "Found", + "TemporaryRedirect", + "PermanentRedirect" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The redirect type the rule will use when redirecting traffic." + } + }, + "required": [ + "@odata.type" + ], + "description": "Describes Redirect Route." + }, + "RouteConfiguration": { + "type": "object", + "oneOf": [ + { + "$ref": "#/definitions/ForwardingConfiguration" + }, + { + "$ref": "#/definitions/RedirectConfiguration" + } + ], + "properties": {}, + "description": "Base class for all types of Route." + }, + "RoutingRule": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RoutingRuleProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create a routing rule." + } + }, + "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." + }, + "RoutingRuleProperties": { + "type": "object", + "properties": { + "acceptedProtocols": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string", + "enum": [ + "Http", + "Https" + ] + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Protocol schemes to match for this rule" + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." + }, + "frontendEndpoints": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/SubResource" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Frontend endpoints associated with this rule" + }, + "patternsToMatch": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The route patterns of the rule." + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource status." + }, + "routeConfiguration": { + "oneOf": [ + { + "$ref": "#/definitions/RouteConfiguration" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Base class for all types of Route." + } + }, + "description": "The JSON object that contains the properties required to create a routing rule." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." + } + } +} diff --git a/schemas/2019-10-01/Microsoft.Network.json b/schemas/2019-10-01/Microsoft.Network.json new file mode 100644 index 0000000000..e375b9338d --- /dev/null +++ b/schemas/2019-10-01/Microsoft.Network.json @@ -0,0 +1,634 @@ +{ + "id": "https://schema.management.azure.com/schemas/2019-10-01/Microsoft.Network.json#", + "$schema": "http://json-schema.org/draft-04/schema#", + "title": "Microsoft.Network", + "description": "Microsoft Network Resource Types", + "resourceDefinitions": { + "FrontDoorWebApplicationFirewallPolicies": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2019-10-01" + ] + }, + "etag": { + "type": "string", + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, + "location": { + "type": "string", + "description": "Resource location." + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "The name of the Web Application Firewall Policy." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/WebApplicationFirewallPolicyProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines web application firewall policy properties." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + } + }, + "definitions": { + "CustomRule": { + "type": "object", + "properties": { + "action": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes what action to be applied when rule matches." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified." + }, + "matchConditions": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/MatchCondition" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of match conditions." + }, + "name": { + "type": "string", + "maxLength": 128, + "description": "Describes the name of the rule." + }, + "priority": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + }, + "rateLimitDurationInMinutes": { + "oneOf": [ + { + "type": "integer", + "minimum": 0, + "maximum": 5 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Time window for resetting the rate limit count. Default is 1 minute." + }, + "rateLimitThreshold": { + "oneOf": [ + { + "type": "integer", + "minimum": 0 + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Number of allowed requests per client within the time window." + }, + "ruleType": { + "oneOf": [ + { + "type": "string", + "enum": [ + "MatchRule", + "RateLimitRule" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes type of rule." + } + }, + "required": [ + "action", + "matchConditions", + "priority", + "ruleType" + ], + "description": "Defines contents of a web application rule" + }, + "CustomRuleList": { + "type": "object", + "properties": { + "rules": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/CustomRule" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rules" + } + }, + "description": "Defines contents of custom rules" + }, + "ManagedRuleExclusion": { + "type": "object", + "properties": { + "matchVariable": { + "oneOf": [ + { + "type": "string", + "enum": [ + "RequestHeaderNames", + "RequestCookieNames", + "QueryStringArgNames", + "RequestBodyPostArgNames" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The variable type to be excluded." + }, + "selector": { + "type": "string", + "description": "Selector value for which elements in the collection this exclusion applies to." + }, + "selectorMatchOperator": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Equals", + "Contains", + "StartsWith", + "EndsWith", + "EqualsAny" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to." + } + }, + "required": [ + "matchVariable", + "selector", + "selectorMatchOperator" + ], + "description": "Exclude variables from managed rule evaluation." + }, + "ManagedRuleGroupOverride": { + "type": "object", + "properties": { + "exclusions": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes the exclusions that are applied to all rules in the group." + }, + "ruleGroupName": { + "type": "string", + "description": "Describes the managed rule group to override." + }, + "rules": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleOverride" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." + } + }, + "required": [ + "ruleGroupName" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleOverride": { + "type": "object", + "properties": { + "action": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes the override action to be applied when rule matches." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified." + }, + "exclusions": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes the exclusions that are applied to this specific rule." + }, + "ruleId": { + "type": "string", + "description": "Identifier for the managed rule." + } + }, + "required": [ + "ruleId" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleSet": { + "type": "object", + "properties": { + "exclusions": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes the exclusions that are applied to all rules in the set." + }, + "ruleGroupOverrides": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleGroupOverride" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the rule group overrides to apply to the rule set." + }, + "ruleSetType": { + "type": "string", + "description": "Defines the rule set type to use." + }, + "ruleSetVersion": { + "type": "string", + "description": "Defines the version of the rule set to use." + } + }, + "required": [ + "ruleSetType", + "ruleSetVersion" + ], + "description": "Defines a managed rule set." + }, + "ManagedRuleSetList": { + "type": "object", + "properties": { + "managedRuleSets": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleSet" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rule sets." + } + }, + "description": "Defines the list of managed rule sets for the policy." + }, + "MatchCondition": { + "type": "object", + "properties": { + "matchValue": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of possible match values." + }, + "matchVariable": { + "oneOf": [ + { + "type": "string", + "enum": [ + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestHeader", + "RequestBody", + "Cookies", + "SocketAddr" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Request variable to compare with." + }, + "negateCondition": { + "oneOf": [ + { + "type": "boolean" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the result of this condition should be negated." + }, + "operator": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith", + "RegEx" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Comparison type to use for matching with the variable value." + }, + "selector": { + "type": "string", + "description": "Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null." + }, + "transforms": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of transforms." + } + }, + "required": [ + "matchValue", + "matchVariable", + "operator" + ], + "description": "Define a match condition." + }, + "PolicySettings": { + "type": "object", + "properties": { + "customBlockResponseBody": { + "oneOf": [ + { + "type": "string", + "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding." + }, + "customBlockResponseStatusCode": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response status code." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified." + }, + "mode": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Prevention", + "Detection" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Describes if it is in detection mode or prevention mode at policy level." + }, + "redirectUrl": { + "type": "string", + "description": "If action type is redirect, this field represents redirect URL for the client." + } + }, + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + }, + "WebApplicationFirewallPolicyProperties": { + "type": "object", + "properties": { + "customRules": { + "oneOf": [ + { + "$ref": "#/definitions/CustomRuleList" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines contents of custom rules" + }, + "managedRules": { + "oneOf": [ + { + "$ref": "#/definitions/ManagedRuleSetList" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the list of managed rule sets for the policy." + }, + "policySettings": { + "oneOf": [ + { + "$ref": "#/definitions/PolicySettings" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + } + }, + "description": "Defines web application firewall policy properties." + } + } +} diff --git a/schemas/2019-11-01/Microsoft.Network.json b/schemas/2019-11-01/Microsoft.Network.json index 8ee273057c..f830bfde39 100644 --- a/schemas/2019-11-01/Microsoft.Network.json +++ b/schemas/2019-11-01/Microsoft.Network.json @@ -4,100 +4,89 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "NetworkExperimentProfiles": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, "apiVersion": { "type": "string", "enum": [ "2019-11-01" ] }, + "etag": { + "type": "string", + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, "location": { "type": "string", "description": "Resource location." }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9_\\-\\(\\)\\.]*[^\\.]$" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The Profile identifier associated with the Tenant and Partner" }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" + "$ref": "#/definitions/ProfileProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application gateway." + "description": "Defines the properties of an experiment" }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/NetworkExperimentProfiles_Experiments_childResource" } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." + ] + } }, - "identity": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/ManagedServiceIdentity" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The identity of the application gateway, if configured." + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/NetworkExperimentProfiles" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationGateways" + "description": "Microsoft.Network/NetworkExperimentProfiles" }, - "ApplicationGatewayWebApplicationFirewallPolicies": { + "NetworkExperimentProfiles_Experiments": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, "apiVersion": { "type": "string", "enum": [ @@ -108,62 +97,28 @@ "type": "string", "description": "Resource location." }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9_\\-\\(\\)\\.]*[^\\.]$" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The Experiment identifier associated with the Experiment" }, "properties": { "oneOf": [ { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" + "$ref": "#/definitions/ExperimentProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the web application firewall policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - }, - "applicationSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." + "description": "Defines the properties of an experiment" }, "tags": { "oneOf": [ @@ -171,7 +126,8 @@ "type": "object", "additionalProperties": { "type": "string" - } + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" @@ -179,110 +135,106 @@ ], "description": "Resource tags." }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application security group." + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/NetworkExperimentProfiles/Experiments" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { + "description": "Microsoft.Network/NetworkExperimentProfiles/Experiments" + } + }, + "definitions": { + "Endpoint": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "endpoint": { "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] + "description": "The endpoint URL" }, - "apiVersion": { + "name": { "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { + "description": "The name of the endpoint" + } + }, + "description": "Defines the endpoint properties" + }, + "ExperimentProperties": { + "type": "object", + "properties": { + "description": { "type": "string", - "description": "Resource location." + "description": "The description of the details or intents of the Experiment" }, - "tags": { + "enabledState": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The state of the Experiment." }, - "properties": { + "endpointA": { "oneOf": [ { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" + "$ref": "#/definitions/Endpoint" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the azure firewall." + "description": "Defines the endpoint properties" }, - "zones": { + "endpointB": { "oneOf": [ { - "type": "array", - "items": { - "type": "string" - } + "$ref": "#/definitions/Endpoint" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Defines the endpoint properties" + }, + "resourceState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of availability zones denoting where the resource needs to come from." + "description": "Resource status." } }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" + "description": "Defines the properties of an experiment" }, - "bastionHosts": { + "NetworkExperimentProfiles_Experiments_childResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, "apiVersion": { "type": "string", "enum": [ @@ -293,62 +245,28 @@ "type": "string", "description": "Resource location." }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9_\\-\\(\\)\\.]*[^\\.]$" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The Experiment identifier associated with the Experiment" }, "properties": { "oneOf": [ { - "$ref": "#/definitions/BastionHostPropertiesFormat" + "$ref": "#/definitions/ExperimentProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Represents the bastion host resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/bastionHosts" - }, - "connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." + "description": "Defines the properties of an experiment" }, "tags": { "oneOf": [ @@ -356,7 +274,8 @@ "type": "object", "additionalProperties": { "type": "string" - } + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" @@ -364,15082 +283,60 @@ ], "description": "Resource tags." }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway connection." + "type": { + "type": "string", + "enum": [ + "Experiments" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/connections" + "description": "Microsoft.Network/NetworkExperimentProfiles/Experiments" }, - "ddosCustomPolicies": { + "ProfileProperties": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { + "enabledState": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The state of the Experiment." }, - "properties": { + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the DDoS custom policy." + "description": "Resource status." } }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ddosCustomPolicies" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of ExpressRoutePort, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "firewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the firewall policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies" - }, - "firewallPolicies_ruleGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleGroups" - }, - "ipGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ipGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpGroups." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ipGroups" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualHubs_routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualRouters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Router." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualRouters" - }, - "virtualRouters_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnServerConfigurations" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "type": "object", - "properties": { - "aadTenant": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD tenant." - }, - "aadAudience": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD audience." - }, - "aadIssuer": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD issuer." - } - }, - "description": "AAD Vpn authentication type related parameters." - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "hostnames": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 20000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the request routing rule." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - }, - "urlConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url Configuration Action in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this paramter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlConfiguration": { - "type": "object", - "properties": { - "modifiedPath": { - "type": "string", - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null." - }, - "modifiedQueryString": { - "type": "string", - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null." - }, - "reroute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false." - } - }, - "description": "Url configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of Application Protocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule condition." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule condition." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Rule condition of type application." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https", - "Mssql" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "managementIpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall used for management traffic." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the firewall belongs." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The firewallPolicy associated with this azure firewall." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure Firewall Resource SKU." - }, - "additionalProperties": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional properties used to further config this azure firewall." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "AzureFirewallSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an Azure Firewall SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an Azure Firewall." - } - }, - "description": "SKU of an Azure Firewall." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - } - }, - "description": "BGP settings details." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorEndpoint": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor endpoint." - }, - "resourceId": { - "type": "string", - "description": "Resource ID of the connection monitor endpoint." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor endpoint (IP or domain name)." - }, - "filter": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Filter for sub-items within the endpoint." - } - }, - "required": [ - "name" - ], - "description": "Describes the connection monitor endpoint." - }, - "ConnectionMonitorEndpointFilter": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Include" - ], - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported." - }, - "items": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items in the filter." - } - }, - "description": "Describes the connection monitor endpoint filter." - }, - "ConnectionMonitorEndpointFilterItem": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "AgentAddress" - ], - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported." - }, - "address": { - "type": "string", - "description": "The address of the filter item." - } - }, - "description": "Describes the connection monitor endpoint filter item." - }, - "ConnectionMonitorHttpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "method": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Get", - "Post" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP method to use." - }, - "path": { - "type": "string", - "description": "The path component of the URI. For instance, \"/dir1/dir2\"." - }, - "requestHeaders": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HTTPHeader" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP headers to transmit with the request." - }, - "validStatusCodeRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\"." - }, - "preferHTTPS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit." - } - }, - "description": "Describes the HTTP configuration." - }, - "ConnectionMonitorIcmpConfiguration": { - "type": "object", - "properties": { - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the ICMP configuration." - }, - "ConnectionMonitorOutput": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Workspace" - ], - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported." - }, - "workspaceSettings": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the settings for producing output into a log analytics workspace." - } - }, - "description": "Describes a connection monitor output destination." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - }, - "endpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor endpoints." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test configurations." - }, - "testGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test groups." - }, - "outputs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor outputs." - }, - "notes": { - "type": "string", - "description": "Optional notes to be associated with the connection monitor." - } - }, - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ConnectionMonitorSuccessThreshold": { - "type": "object", - "properties": { - "checksFailedPercent": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful." - }, - "roundTripTimeMs": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful." - } - }, - "description": "Describes the threshold for declaring a test successful." - }, - "ConnectionMonitorTcpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the TCP configuration." - }, - "ConnectionMonitorTestConfiguration": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test configuration." - }, - "testFrequencySec": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The frequency of test evaluation, in seconds." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Http", - "Icmp" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol to use in test evaluation." - }, - "preferredIPVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters." - }, - "httpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over HTTP." - }, - "tcpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over TCP." - }, - "icmpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over ICMP." - }, - "successThreshold": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The threshold for declaring a test successful." - } - }, - "required": [ - "name", - "protocol" - ], - "description": "Describes a connection monitor test configuration." - }, - "ConnectionMonitorTestGroup": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test group." - }, - "disable": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether test group is disabled." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of test configuration names." - }, - "sources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source endpoint names." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination endpoint names." - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "description": "Describes the connection monitor test group." - }, - "ConnectionMonitorWorkspaceSettings": { - "type": "object", - "properties": { - "workspaceResourceId": { - "type": "string", - "description": "Log analytics workspace resource ID." - } - }, - "description": "Describes the settings for producing output into a log analytics workspace." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - }, - "protectedIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enables DDoS protection on the public IP." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering stats of express route circuit." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Primary BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The primary BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The peering location of the ExpressRoute circuit." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The circuit bandwidth In Mbps." - }, - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkMacSecConfig": { - "type": "object", - "properties": { - "cknSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CKN key." - }, - "cakSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CAK key." - }, - "cipher": { - "oneOf": [ - { - "type": "string", - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Mac security cipher." - } - }, - "description": "ExpressRouteLink Mac Security Configuration." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - }, - "macSecConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "MacSec configuration." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "firewallPolicies_ruleGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ruleGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleGroups" - }, - "FirewallPolicyFilterRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Filter rule." - }, - "ruleConditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rule conditions used by a rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Firewall Policy Filter Rule." - }, - "FirewallPolicyFilterRuleAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyFilterRuleAction." - }, - "FirewallPolicyNatRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Nat rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "ruleCondition": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The match conditions for incoming traffic." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Firewall Policy NAT Rule." - }, - "FirewallPolicyNatRuleAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "DNAT" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyNatRuleAction." - }, - "FirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "basePolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parent firewall policy from which rules are inherited." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - } - }, - "description": "Firewall Policy definition." - }, - "FirewallPolicyRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "The name of the rule." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule resource." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Properties of the rule." - }, - "FirewallPolicyRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/ApplicationRuleCondition" - } - ], - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NetworkRuleCondition" - } - ], - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "Name of the rule condition." - }, - "description": { - "type": "string", - "description": "Description of the rule condition." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Properties of a rule." - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000." - } - }, - "description": "Properties of the application rule protocol." - }, - "FirewallPolicyRuleGroupProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Group resource." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Group of Firewall Policy rules." - } - }, - "description": "Properties of the rule group." - }, - "FlowLogFormatParameters": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "JSON" - ], - "description": "The file type of flow log." - }, - "version": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The version (revision) of the flow log." - } - }, - "description": "Parameters that define the flow log format." - }, - "FlowLogPropertiesFormat": { - "type": "object", - "properties": { - "targetResourceId": { - "type": "string", - "description": "ID of network security group to which flow log will be applied." - }, - "storageId": { - "type": "string", - "description": "ID of the storage account which is used to store the flow log." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable flow logging." - }, - "retentionPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the retention policy for flow log." - }, - "format": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the flow log format." - }, - "flowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "description": "Parameters that define the configuration of flow log." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HTTPHeader": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name in HTTP header." - }, - "value": { - "type": "string", - "description": "The value in HTTP header." - } - }, - "description": "The HTTP header." - }, - "HubVirtualNetworkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "HubVirtualNetworkConnection Resource." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpGroupPropertiesFormat": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource." - } - }, - "description": "The IpGroups property information." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "The IP tag type. Example: FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "The value of the IP tag associated with the public IP. Example: SQL." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedRuleGroupOverride": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The managed rule group to override." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRuleOverride": { - "type": "object", - "properties": { - "ruleId": { - "type": "string", - "description": "Identifier for the managed rule." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the managed rule. Defaults to Disabled if not specified." - } - }, - "required": [ - "ruleId" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRulesDefinition": { - "type": "object", - "properties": { - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Exclusions that are applied on the policy." - }, - "managedRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The managed rule sets that are associated with the policy." - } - }, - "required": [ - "managedRuleSets" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ManagedRuleSet": { - "type": "object", - "properties": { - "ruleSetType": { - "type": "string", - "description": "Defines the rule set type to use." - }, - "ruleSetVersion": { - "type": "string", - "description": "Defines the version of the rule set to use." - }, - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the rule group overrides to apply to the rule set." - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "description": "Defines a managed rule set." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "The selector of match variable." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Rule condition of type network." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "OwaspCrsExclusionEntry": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "P2SConnectionConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2S connection configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SConnectionConfiguration Resource." - }, - "P2SConnectionConfigurationProperties": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - } - }, - "description": "Parameters for P2SConnectionConfiguration." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "p2SConnectionConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all p2s connection configurations of the gateway." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "vpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "The storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the policy." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The mode of the policy." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow WAF to check request Body." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - } - }, - "description": "Properties of the private endpoint." - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionsRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of private link service IP configurations." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - }, - "enableProxyProtocol": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the private link service is enabled for proxy protocol or not." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "RetentionPolicyParameters": { - "type": "object", - "properties": { - "days": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days to retain flow log records." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable retention." - } - }, - "description": "Parameters that define the retention policy for flow log." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private end point in the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private link service in the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "TrafficAnalyticsConfigurationProperties": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable traffic analytics." - }, - "workspaceId": { - "type": "string", - "description": "The resource guid of the attached workspace." - }, - "workspaceRegion": { - "type": "string", - "description": "The location of the attached workspace." - }, - "workspaceResourceId": { - "type": "string", - "description": "Resource Id of the attached workspace." - }, - "trafficAnalyticsInterval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficAnalyticsProperties": { - "type": "object", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficSelectorPolicy": { - "type": "object", - "properties": { - "localAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of local address spaces in CIDR format." - }, - "remoteAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of remote address spaces in CIDR format." - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "description": "An traffic selector policy for a virtual network gateway connection." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "azureFirewall": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The azureFirewall associated with this VirtualHub." - }, - "virtualNetworkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vnet connections with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "virtualHubRouteTableV2s": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all virtual hub route table v2s associated with this VirtualHub." - }, - "sku": { - "type": "string", - "description": "The sku of this VirtualHub." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualHubRouteTableV2": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VirtualHubRouteTableV2 Resource." - }, - "VirtualHubRouteTableV2Properties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "attachedConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all connections attached to this route table v2." - } - }, - "description": "Parameters for VirtualHubRouteTableV2." - }, - "VirtualHubRouteV2": { - "type": "object", - "properties": { - "destinationType": { - "type": "string", - "description": "The type of destinations." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hops." - }, - "nextHops": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NextHops ip address." - } - }, - "description": "VirtualHubRouteTableV2 route." - }, - "virtualHubs_routeTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "VirtualNetworkBgpCommunities": { - "type": "object", - "properties": { - "virtualNetworkCommunity": { - "type": "string", - "description": "The BGP community associated with the virtual network." - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnGatewayGeneration": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Generation1", - "Generation2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." - }, - "gatewayDefaultSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." - }, - "vpnClientConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - }, - "enableDnsForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether dns forwarding is enabled or not." - } - }, - "description": "VirtualNetworkGateway properties." - }, - "VirtualNetworkGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU name." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU tier." - } - }, - "description": "VirtualNetworkGatewaySku details." - }, - "VirtualNetworkPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." - }, - "useRemoteGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." - }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network address space." - }, - "peeringState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The status of the virtual network peering." - } - }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." - }, - "VirtualNetworkPropertiesFormat": { - "type": "object", - "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." - }, - "subnets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of subnets in a Virtual Network." - }, - "virtualNetworkPeerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of peerings in a Virtual Network." - }, - "enableDdosProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." - }, - "enableVmProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." - }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." - }, - "bgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - } - }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." - }, - "destinationLoadBalancerFrontEndIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." - }, - "destinationPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VXLAN destination port that will receive the tapped traffic." - } - }, - "description": "Virtual Network Tap properties." - }, - "VirtualRouterPeeringProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the rule group." - }, - "VirtualRouterPropertiesFormat": { - "type": "object", - "properties": { - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - }, - "hostedSubnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Subnet on which VirtualRouter is hosted." - }, - "hostedGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Gateway on which VirtualRouter is hosted." - } - }, - "description": "Virtual Router definition." - }, - "virtualRouters_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "VirtualWanProperties": { - "type": "object", - "properties": { - "disableVpnEncryption": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Vpn encryption to be disabled or not." - }, - "allowBranchToBranchTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if branch to branch traffic is allowed." - }, - "allowVnetToVnetTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if Vnet to Vnet traffic is allowed." - }, - "office365LocalBreakoutCategory": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The office local breakout category." - }, - "type": { - "type": "string", - "description": "The type of the VirtualWAN." - } - }, - "description": "Parameters for VirtualWAN." - }, - "VpnClientConfiguration": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRootCertificate for virtual network gateway." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." - }, - "vpnClientProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientProtocols for Virtual network gateway." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - } - }, - "description": "VpnClientConfiguration for P2S client." - }, - "VpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VPN client revoked certificate of virtual network gateway." - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway." - }, - "VpnConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnConnection Resource." - }, - "VpnConnectionProperties": { - "type": "object", - "properties": { - "remoteVpnSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Id of the connected vpn site." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing weight for vpn connection." - }, - "connectionStatus": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The connection status." - }, - "vpnConnectionProtocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "enableRateLimiting": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use local azure ip to initiate connection." - }, - "vpnLinkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn site link connections to the gateway." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "connections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn connections to the gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this vpn gateway." - } - }, - "description": "Parameters for VpnGateway." - }, - "vpnGateways_vpnConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2019-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "VpnLinkBgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - } - }, - "description": "BGP settings details for a link." - }, - "VpnLinkProviderProperties": { - "type": "object", - "properties": { - "linkProviderName": { - "type": "string", - "description": "Name of the link provider." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of a link provider." - }, - "VpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." - } - }, - "description": "Properties of the Radius client root certificate of VpnServerConfiguration." - }, - "VpnServerConfigRadiusServerRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of Radius Server root certificate of VpnServerConfiguration." - }, - "VpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the VpnServerConfiguration that is unique within a resource group." - }, - "vpnProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN protocols for the VpnServerConfiguration." - }, - "vpnAuthenticationTypes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN authentication types for the VpnServerConfiguration." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client root certificate of VpnServerConfiguration." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client revoked certificate of VpnServerConfiguration." - }, - "radiusServerRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius Server root certificate of VpnServerConfiguration." - }, - "radiusClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius client root certificate of VpnServerConfiguration." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for VpnServerConfiguration." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection." - }, - "aadAuthenticationParameters": { - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of aad vpn authentication parameters." - } - }, - "description": "Parameters for VpnServerConfiguration." - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration." - }, - "VpnServerConfigVpnClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of VPN client root certificate of VpnServerConfiguration." - }, - "VpnSiteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site link." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLink Resource." - }, - "VpnSiteLinkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site link connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLinkConnection Resource." - }, - "VpnSiteLinkConnectionProperties": { - "type": "object", - "properties": { - "vpnSiteLink": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Id of the connected vpn site link." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing weight for vpn connection." - }, - "connectionStatus": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The connection status." - }, - "vpnConnectionProtocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "enableRateLimiting": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use local azure ip to initiate connection." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnSiteLinkProperties": { - "type": "object", - "properties": { - "linkProperties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The link provider properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site-link." - }, - "bgpProperties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of bgp properties." - } - }, - "description": "Parameters for VpnSite." - }, - "VpnSiteProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the vpnSite belongs." - }, - "deviceProperties": { - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." - }, - "siteKey": { - "type": "string", - "description": "The key for vpn-site that can be used for connections." - }, - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges." - }, - "bgpProperties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of bgp properties." - }, - "isSecuritySite": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IsSecuritySite flag." - }, - "vpnSiteLinks": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn site links." - } - }, - "description": "Parameters for VpnSite." - }, - "WebApplicationFirewallCustomRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." - }, - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MatchRule", - "Invalid" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type." - }, - "matchConditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match conditions." - }, - "action": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Actions." - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule." - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "policySettings": { - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The PolicySettings for policy." - }, - "customRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The custom rules inside the policy." - }, - "managedRules": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the managedRules structure." - } - }, - "required": [ - "managedRules" - ], - "description": "Defines web application firewall policy properties." + "description": "Defines the properties of an experiment" } } } diff --git a/schemas/2020-01-01/Microsoft.Network.json b/schemas/2020-01-01/Microsoft.Network.json new file mode 100644 index 0000000000..3639fb5355 --- /dev/null +++ b/schemas/2020-01-01/Microsoft.Network.json @@ -0,0 +1,1292 @@ +{ + "id": "https://schema.management.azure.com/schemas/2020-01-01/Microsoft.Network.json#", + "$schema": "http://json-schema.org/draft-04/schema#", + "title": "Microsoft.Network", + "description": "Microsoft Network Resource Types", + "resourceDefinitions": { + "privateDnsZones": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the zone." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the Private DNS zone (without a terminating dot)." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/PrivateZoneProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/privateDnsZones_virtualNetworkLinks_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_A_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_AAAA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_CNAME_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_MX_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_PTR_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SOA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SRV_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_TXT_childResource" + } + ] + } + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones" + }, + "privateDnsZones_A": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/A" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/A" + }, + "privateDnsZones_AAAA": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/AAAA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/AAAA" + }, + "privateDnsZones_CNAME": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/CNAME" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/CNAME" + }, + "privateDnsZones_MX": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/MX" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/MX" + }, + "privateDnsZones_PTR": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/PTR" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/PTR" + }, + "privateDnsZones_SOA": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SOA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SOA" + }, + "privateDnsZones_SRV": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SRV" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SRV" + }, + "privateDnsZones_TXT": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/TXT" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/TXT" + }, + "privateDnsZones_virtualNetworkLinks": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/VirtualNetworkLinkProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + } + }, + "definitions": { + "AaaaRecord": { + "type": "object", + "properties": { + "ipv6Address": { + "type": "string", + "description": "The IPv6 address of this AAAA record." + } + }, + "description": "An AAAA record." + }, + "ARecord": { + "type": "object", + "properties": { + "ipv4Address": { + "type": "string", + "description": "The IPv4 address of this A record." + } + }, + "description": "An A record." + }, + "CnameRecord": { + "type": "object", + "properties": { + "cname": { + "type": "string", + "description": "The canonical name for this CNAME record." + } + }, + "description": "A CNAME record." + }, + "MxRecord": { + "type": "object", + "properties": { + "exchange": { + "type": "string", + "description": "The domain name of the mail host for this MX record." + }, + "preference": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The preference value for this MX record." + } + }, + "description": "An MX record." + }, + "privateDnsZones_AAAA_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "AAAA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/AAAA" + }, + "privateDnsZones_A_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "A" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/A" + }, + "privateDnsZones_CNAME_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "CNAME" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/CNAME" + }, + "privateDnsZones_MX_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "MX" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/MX" + }, + "privateDnsZones_PTR_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "PTR" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/PTR" + }, + "privateDnsZones_SOA_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "SOA" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SOA" + }, + "privateDnsZones_SRV_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "SRV" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SRV" + }, + "privateDnsZones_TXT_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/RecordSetProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "TXT" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/TXT" + }, + "privateDnsZones_virtualNetworkLinks_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-01-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { + "oneOf": [ + { + "$ref": "#/definitions/VirtualNetworkLinkProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Represents the properties of the Private DNS zone." + }, + "tags": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "virtualNetworkLinks" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + }, + "PrivateZoneProperties": { + "type": "object", + "properties": {}, + "description": "Represents the properties of the Private DNS zone." + }, + "PtrRecord": { + "type": "object", + "properties": { + "ptrdname": { + "type": "string", + "description": "The PTR target domain name for this PTR record." + } + }, + "description": "A PTR record." + }, + "RecordSetProperties": { + "type": "object", + "properties": { + "aaaaRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/AaaaRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of AAAA records in the record set." + }, + "aRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ARecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of A records in the record set." + }, + "cnameRecord": { + "oneOf": [ + { + "$ref": "#/definitions/CnameRecord" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "A CNAME record." + }, + "metadata": { + "oneOf": [ + { + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The metadata attached to the record set." + }, + "mxRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/MxRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of MX records in the record set." + }, + "ptrRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/PtrRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of PTR records in the record set." + }, + "soaRecord": { + "oneOf": [ + { + "$ref": "#/definitions/SoaRecord" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "An SOA record." + }, + "srvRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/SrvRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of SRV records in the record set." + }, + "ttl": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The TTL (time-to-live) of the records in the record set." + }, + "txtRecords": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/TxtRecord" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The list of TXT records in the record set." + } + }, + "description": "Represents the properties of the records in the record set." + }, + "SoaRecord": { + "type": "object", + "properties": { + "email": { + "type": "string", + "description": "The email contact for this SOA record." + }, + "expireTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The expire time for this SOA record." + }, + "host": { + "type": "string", + "description": "The domain name of the authoritative name server for this SOA record." + }, + "minimumTtl": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The minimum value for this SOA record. By convention this is used to determine the negative caching duration." + }, + "refreshTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The refresh value for this SOA record." + }, + "retryTime": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The retry time for this SOA record." + }, + "serialNumber": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The serial number for this SOA record." + } + }, + "description": "An SOA record." + }, + "SrvRecord": { + "type": "object", + "properties": { + "port": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The port value for this SRV record." + }, + "priority": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The priority value for this SRV record." + }, + "target": { + "type": "string", + "description": "The target domain name for this SRV record." + }, + "weight": { + "oneOf": [ + { + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The weight value for this SRV record." + } + }, + "description": "An SRV record." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." + }, + "TxtRecord": { + "type": "object", + "properties": { + "value": { + "oneOf": [ + { + "type": "array", + "items": { + "type": "string" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The text value of this TXT record." + } + }, + "description": "A TXT record." + }, + "VirtualNetworkLinkProperties": { + "type": "object", + "properties": { + "registrationEnabled": { + "oneOf": [ + { + "type": "boolean" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Is auto-registration of virtual machine records in the virtual network in the Private DNS zone enabled?" + }, + "virtualNetwork": { + "oneOf": [ + { + "$ref": "#/definitions/SubResource" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Reference to another subresource." + } + }, + "description": "Represents the properties of the Private DNS zone." + } + } +} diff --git a/schemas/2020-04-01/Microsoft.Network.json b/schemas/2020-04-01/Microsoft.Network.json index 731c9fe452..7e6dd34170 100644 --- a/schemas/2020-04-01/Microsoft.Network.json +++ b/schemas/2020-04-01/Microsoft.Network.json @@ -4,18 +4,9 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "frontDoors": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, "apiVersion": { "type": "string", "enum": [ @@ -26,15286 +17,328 @@ "type": "string", "description": "Resource location." }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9]?[a-zA-Z0-9])*$", + "minLength": 5, + "maxLength": 64 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Name of the Front Door which is globally unique." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" + "$ref": "#/definitions/FrontDoorProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application gateway." + "description": "The JSON object that contains the properties required to create an endpoint." }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/frontDoors_rulesEngines_childResource" } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." + ] + } }, - "identity": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/ManagedServiceIdentity" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The identity of the application gateway, if configured." + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/frontDoors" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationGateways" + "description": "Microsoft.Network/frontDoors" }, - "ApplicationGatewayWebApplicationFirewallPolicies": { + "frontDoors_rulesEngines": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-04-01" ] }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { + "name": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$", + "minLength": 1, + "maxLength": 90 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Name of the Rules Engine which is unique within the Front Door." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" + "$ref": "#/definitions/RulesEngineProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the web application firewall policy." + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/frontDoors/rulesEngines" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" + "description": "Microsoft.Network/frontDoors/rulesEngines" }, - "applicationSecurityGroups": { + "FrontDoorWebApplicationFirewallPolicies": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-04-01" ] }, + "etag": { + "type": "string", + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, "location": { "type": "string", "description": "Resource location." }, - "tags": { + "name": { + "type": "string", + "maxLength": 128, + "description": "The name of the Web Application Firewall Policy." + }, + "properties": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "$ref": "#/definitions/WebApplicationFirewallPolicyProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Defines web application firewall policy properties." }, - "properties": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application security group." + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { + "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + } + }, + "definitions": { + "Backend": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, - "apiVersion": { + "address": { "type": "string", - "enum": [ - "2020-04-01" - ] + "description": "Location of the backend (IP address or FQDN)" }, - "location": { + "backendHostHeader": { "type": "string", - "description": "Resource location." + "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." }, - "tags": { + "enabledState": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." }, - "properties": { + "httpPort": { "oneOf": [ { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the azure firewall." + "description": "The HTTP TCP port number. Must be between 1 and 65535." }, - "zones": { + "httpsPort": { "oneOf": [ { - "type": "array", - "items": { - "type": "string" - } + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of availability zones denoting where the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" - }, - "bastionHosts": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Bastion Host." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." + "description": "The HTTPS TCP port number. Must be between 1 and 65535." }, - "tags": { + "priority": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "integer", + "minimum": 1, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." }, - "properties": { + "privateLinkAlias": { + "type": "string", + "description": "The Alias of the Private Link resource. Populating this optional field indicates that this backend is 'Private'" + }, + "privateLinkApprovalMessage": { + "type": "string", + "description": "A custom message to be included in the approval request to connect to the Private Link" + }, + "weight": { "oneOf": [ { - "$ref": "#/definitions/BastionHostPropertiesFormat" + "type": "integer", + "minimum": 1, + "maximum": 1000 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Represents the bastion host resource." + "description": "Weight of this endpoint for load balancing purposes." } }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/bastionHosts" + "description": "Backend address of a frontDoor load balancer." }, - "connections": { + "BackendPool": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { + "id": { "type": "string", - "enum": [ - "2020-04-01" - ] + "description": "Resource ID." }, - "location": { + "name": { "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "description": "Resource name." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" + "$ref": "#/definitions/BackendPoolProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network gateway connection." + "description": "The JSON object that contains the properties required to create a Backend Pool." } }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/connections" + "description": "A backend pool is a collection of backends that can be routed to." }, - "ddosCustomPolicies": { + "BackendPoolProperties": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { + "backends": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" + "type": "array", + "items": { + "$ref": "#/definitions/Backend" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The set of backends for this pool" }, - "properties": { + "healthProbeSettings": { "oneOf": [ { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the DDoS custom policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ddosCustomPolicies" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of ExpressRoutePort, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "firewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the firewall policy." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of the firewall policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies" - }, - "firewallPolicies_ruleGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleGroups" - }, - "IpAllocations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/IpAllocations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpAllocation." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/IpAllocations" - }, - "ipGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ipGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpGroups." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ipGroups" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_backendAddressPools": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkVirtualAppliances": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Network Virtual Appliance." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The service principal that has read access to cloud-init and config blob." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network Virtual Appliance SKU." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateEndpoints_privateDnsZoneGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "securityPartnerProviders": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Security Partner Provider." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/securityPartnerProviders" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualHubs_hubRouteTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualRouters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Router." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualRouters" - }, - "virtualRouters_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnServerConfigurations" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "type": "object", - "properties": { - "aadTenant": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD tenant." - }, - "aadAudience": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD audience." - }, - "aadIssuer": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD issuer." - } - }, - "description": "AAD Vpn authentication type related parameters." - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "hostNames": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - }, - "forceFirewallPolicyAssociation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 20000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the request routing rule." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - }, - "urlConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url Configuration Action in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this paramter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlConfiguration": { - "type": "object", - "properties": { - "modifiedPath": { - "type": "string", - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null." - }, - "modifiedQueryString": { - "type": "string", - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null." - }, - "reroute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false." - } - }, - "description": "Url configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of Application Protocols." - }, - "targetUrls": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Urls for this rule condition." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule condition." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule condition." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Rule condition of type application." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https", - "Mssql" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "managementIpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall used for management traffic." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the firewall belongs." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The firewallPolicy associated with this azure firewall." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure Firewall Resource SKU." - }, - "additionalProperties": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional properties used to further config this azure firewall." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "AzureFirewallSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an Azure Firewall SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an Azure Firewall." - } - }, - "description": "SKU of an Azure Firewall." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "loadBalancerBackendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of backend addresses." - } - }, - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - }, - "bgpPeeringAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BGP peering address with IP configuration ID for virtual network gateway." - } - }, - "description": "BGP settings details." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorEndpoint": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor endpoint." - }, - "resourceId": { - "type": "string", - "description": "Resource ID of the connection monitor endpoint." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor endpoint (IP or domain name)." - }, - "filter": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Filter for sub-items within the endpoint." - } - }, - "required": [ - "name" - ], - "description": "Describes the connection monitor endpoint." - }, - "ConnectionMonitorEndpointFilter": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Include" - ], - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported." - }, - "items": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items in the filter." - } - }, - "description": "Describes the connection monitor endpoint filter." - }, - "ConnectionMonitorEndpointFilterItem": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "AgentAddress" - ], - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported." - }, - "address": { - "type": "string", - "description": "The address of the filter item." - } - }, - "description": "Describes the connection monitor endpoint filter item." - }, - "ConnectionMonitorHttpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "method": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Get", - "Post" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP method to use." - }, - "path": { - "type": "string", - "description": "The path component of the URI. For instance, \"/dir1/dir2\"." - }, - "requestHeaders": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HTTPHeader" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP headers to transmit with the request." - }, - "validStatusCodeRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\"." - }, - "preferHTTPS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit." - } - }, - "description": "Describes the HTTP configuration." - }, - "ConnectionMonitorIcmpConfiguration": { - "type": "object", - "properties": { - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the ICMP configuration." - }, - "ConnectionMonitorOutput": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Workspace" - ], - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported." - }, - "workspaceSettings": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the settings for producing output into a log analytics workspace." - } - }, - "description": "Describes a connection monitor output destination." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - }, - "endpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor endpoints." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test configurations." - }, - "testGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test groups." - }, - "outputs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor outputs." - }, - "notes": { - "type": "string", - "description": "Optional notes to be associated with the connection monitor." - } - }, - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ConnectionMonitorSuccessThreshold": { - "type": "object", - "properties": { - "checksFailedPercent": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful." - }, - "roundTripTimeMs": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful." - } - }, - "description": "Describes the threshold for declaring a test successful." - }, - "ConnectionMonitorTcpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the TCP configuration." - }, - "ConnectionMonitorTestConfiguration": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test configuration." - }, - "testFrequencySec": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The frequency of test evaluation, in seconds." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Http", - "Icmp" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol to use in test evaluation." - }, - "preferredIPVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters." - }, - "httpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over HTTP." - }, - "tcpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over TCP." - }, - "icmpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over ICMP." - }, - "successThreshold": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The threshold for declaring a test successful." - } - }, - "required": [ - "name", - "protocol" - ], - "description": "Describes a connection monitor test configuration." - }, - "ConnectionMonitorTestGroup": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test group." - }, - "disable": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether test group is disabled." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of test configuration names." - }, - "sources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source endpoint names." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination endpoint names." - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "description": "Describes the connection monitor test group." - }, - "ConnectionMonitorWorkspaceSettings": { - "type": "object", - "properties": { - "workspaceResourceId": { - "type": "string", - "description": "Log analytics workspace resource ID." - } - }, - "description": "Describes the settings for producing output into a log analytics workspace." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "CustomDnsConfigPropertiesFormat": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fqdn that resolves to private endpoint ip address." - }, - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of private ip addresses of the private endpoint." - } - }, - "description": "Contains custom Dns resolution configuration from customer." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - }, - "protectedIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enables DDoS protection on the public IP." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - }, - "ipv6CircuitConnectionConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IPv6 Address PrefixProperties of the express route circuit connection." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering stats of express route circuit." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Primary BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The primary BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The peering location of the ExpressRoute circuit." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The circuit bandwidth In Mbps." - }, - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkMacSecConfig": { - "type": "object", - "properties": { - "cknSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CKN key." - }, - "cakSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CAK key." - }, - "cipher": { - "oneOf": [ - { - "type": "string", - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Mac security cipher." - } - }, - "description": "ExpressRouteLink Mac Security Configuration." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - }, - "macSecConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "MacSec configuration." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "firewallPolicies_ruleGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ruleGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleGroups" - }, - "FirewallPolicyCertificateAuthority": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthorityPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the certificate authority." - }, - "name": { - "type": "string", - "description": "Name of the CA certificate." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FirewallPolicyCertificateAuthorityPropertiesFormat": { - "type": "object", - "properties": { - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FirewallPolicyFilterRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Filter rule." - }, - "ruleConditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rule conditions used by a rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Firewall Policy Filter Rule." - }, - "FirewallPolicyFilterRuleAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyFilterRuleAction." - }, - "FirewallPolicyNatRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Nat rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "ruleCondition": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The match conditions for incoming traffic." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Firewall Policy NAT Rule." - }, - "FirewallPolicyNatRuleAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "DNAT" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyNatRuleAction." - }, - "FirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "basePolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parent firewall policy from which rules are inherited." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "threatIntelWhitelist": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "intrusionSystemMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Intrusion system." - }, - "transportSecurity": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "TLS Configuration definition." - } - }, - "description": "Firewall Policy definition." - }, - "FirewallPolicyRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "The name of the rule." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule resource." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Properties of the rule." - }, - "FirewallPolicyRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/ApplicationRuleCondition" - } - ], - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NatRuleCondition" - } - ], - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NetworkRuleCondition" - } - ], - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "Name of the rule condition." - }, - "description": { - "type": "string", - "description": "Description of the rule condition." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Properties of a rule." - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000." - } - }, - "description": "Properties of the application rule protocol." - }, - "FirewallPolicyRuleGroupProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Group resource." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Group of Firewall Policy rules." - } - }, - "description": "Properties of the rule group." - }, - "FirewallPolicyThreatIntelWhitelist": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of IP addresses for the ThreatIntel Whitelist." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for the ThreatIntel Whitelist." - } - }, - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "FirewallPolicyTransportSecurity": { - "type": "object", - "properties": { - "certificateAuthority": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CA used for intermediate CA generation." - }, - "excludedDomains": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of domains which are excluded from TLS termination." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Certificates which are to be trusted by the firewall." - } - }, - "description": "Configuration needed to perform TLS termination & initiation." - }, - "FirewallPolicyTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the trusted root authorities." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within a firewall policy." - } - }, - "description": "Trusted Root certificates of a firewall policy." - }, - "FirewallPolicyTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) the public certificate data stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FlowLogFormatParameters": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "JSON" - ], - "description": "The file type of flow log." - }, - "version": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The version (revision) of the flow log." - } - }, - "description": "Parameters that define the flow log format." - }, - "FlowLogPropertiesFormat": { - "type": "object", - "properties": { - "targetResourceId": { - "type": "string", - "description": "ID of network security group to which flow log will be applied." - }, - "storageId": { - "type": "string", - "description": "ID of the storage account which is used to store the flow log." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable flow logging." - }, - "retentionPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the retention policy for flow log." - }, - "format": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the flow log format." - }, - "flowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "description": "Parameters that define the configuration of flow log." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HTTPHeader": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name in HTTP header." - }, - "value": { - "type": "string", - "description": "The value in HTTP header." - } - }, - "description": "The HTTP header." - }, - "HubRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route." - }, - "destinationType": { - "type": "string", - "description": "The type of destinations (eg: CIDR, ResourceId, Service)." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hop (eg: ResourceId)." - }, - "nextHop": { - "type": "string", - "description": "NextHop resource ID." - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "description": "RouteTable route." - }, - "HubRouteTableProperties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of labels associated with this route table." - } - }, - "description": "Parameters for RouteTable." - }, - "HubVirtualNetworkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "HubVirtualNetworkConnection Resource." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "IpAllocationPropertiesFormat": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Undefined", - "Hypernet" - ], - "description": "The type for the IpAllocation." - }, - "prefix": { - "type": "string", - "description": "The address prefix for the IpAllocation." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix length for the IpAllocation." - }, - "prefixType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix Type for the IpAllocation." - }, - "ipamAllocationId": { - "type": "string", - "description": "The IPAM allocation ID." - }, - "allocationTags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAllocation tags." - } - }, - "description": "Properties of the IpAllocation." - }, - "IPConfigurationBgpPeeringAddress": { - "type": "object", - "properties": { - "ipconfigurationId": { - "type": "string", - "description": "The ID of IP configuration which belongs to gateway." - }, - "customBgpIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of custom BGP peering addresses which belong to IP configuration." - } - }, - "description": "Properties of IPConfigurationBgpPeeringAddress." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpGroupPropertiesFormat": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource." - } - }, - "description": "The IpGroups property information." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "The IP tag type. Example: FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "The value of the IP tag associated with the public IP. Example: SQL." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6CircuitConnectionConfig": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "/125 IP address space to carve out customer addresses for global reach." - } - }, - "description": "IPv6 Circuit Connection properties for global reach." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerBackendAddress": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address." - } - }, - "description": "Load balancer backend addresses." - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetwork" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to an existing virtual network." - }, - "ipAddress": { - "type": "string", - "description": "IP Address belonging to the referenced virtual network." - }, - "networkInterfaceIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to IP address defined in network interfaces." - } - }, - "description": "Properties of the load balancer backend addresses." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_backendAddressPools_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "fqdn": { - "type": "string", - "description": "FQDN of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedRuleGroupOverride": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The managed rule group to override." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRuleOverride": { - "type": "object", - "properties": { - "ruleId": { - "type": "string", - "description": "Identifier for the managed rule." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the managed rule. Defaults to Disabled if not specified." - } - }, - "required": [ - "ruleId" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRulesDefinition": { - "type": "object", - "properties": { - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Exclusions that are applied on the policy." - }, - "managedRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The managed rule sets that are associated with the policy." - } - }, - "required": [ - "managedRuleSets" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ManagedRuleSet": { - "type": "object", - "properties": { - "ruleSetType": { - "type": "string", - "description": "Defines the rule set type to use." - }, - "ruleSetVersion": { - "type": "string", - "description": "Defines the version of the rule set to use." - }, - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the rule group overrides to apply to the rule set." - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "description": "Defines a managed rule set." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "The selector of match variable." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NatRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "terminateTLS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Terminate TLS connections for this rule." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Rule condition of type nat." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkRuleCondition": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleConditionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRuleCondition" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - }, - "ruleConditionType": { - "type": "string" - } - }, - "required": [ - "ruleConditionType" - ], - "description": "Rule condition of type network." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "type": "object", - "properties": { - "bootStrapConfigurationBlob": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BootStrapConfigurationBlob storage URLs." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where Network Virtual Appliance is being deployed." - }, - "cloudInitConfigurationBlob": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "CloudInitConfigurationBlob storage URLs." - }, - "virtualApplianceAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualAppliance ASN." - } - }, - "description": "Network Virtual Appliance definition." - }, - "NetworkWatcherPropertiesFormat": { - "type": "object", - "properties": {}, - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "OwaspCrsExclusionEntry": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "P2SConnectionConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2S connection configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SConnectionConfiguration Resource." - }, - "P2SConnectionConfigurationProperties": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for P2SConnectionConfiguration." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "p2SConnectionConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all p2s connection configurations of the gateway." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "vpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "customDnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all customer specified DNS servers IP addresses." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "The storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the policy." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The mode of the policy." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow WAF to check request Body." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateDnsZoneConfig": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone configuration." - } - }, - "description": "PrivateDnsZoneConfig resource." - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of private dns zone configurations of the private dns zone group." - } - }, - "description": "Properties of the private dns zone group." - }, - "PrivateDnsZonePropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneId": { - "type": "string", - "description": "The resource id of the private dns zone." - } - }, - "description": "Properties of the private dns zone configuration resource." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - }, - "customDnsConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of custom dns configurations." - } - }, - "description": "Properties of the private endpoint." - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionsRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of private link service IP configurations." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - }, - "enableProxyProtocol": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the private link service is enabled for proxy protocol or not." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "PropagatedRouteTable": { - "type": "object", - "properties": { - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of labels." - }, - "ids": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of resource ids of all the RouteTables." - } - }, - "description": "The list of RouteTables to advertise the routes to." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "RadiusServer": { - "type": "object", - "properties": { - "radiusServerAddress": { - "type": "string", - "description": "The address of this radius server." - }, - "radiusServerScore": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The initial score assigned to this radius server." - }, - "radiusServerSecret": { - "type": "string", - "description": "The secret used for this radius server." - } - }, - "required": [ - "radiusServerAddress" - ], - "description": "Radius Server Settings." - }, - "RetentionPolicyParameters": { - "type": "object", - "properties": { - "days": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days to retain flow log records." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable retention." - } - }, - "description": "Parameters that define the retention policy for flow log." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "RoutingConfiguration": { - "type": "object", - "properties": { - "associatedRouteTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The resource id RouteTable associated with this RoutingConfiguration." - }, - "propagatedRouteTables": { - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of RouteTables to advertise the routes to." - }, - "vnetRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - } - }, - "description": "Routing Configuration indicating the associated and propagated route tables for this connection." - }, - "SecurityPartnerProviderPropertiesFormat": { - "type": "object", - "properties": { - "securityProviderName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The security provider name." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the Security Partner Provider belongs." - } - }, - "description": "Properties of the Security Partner Provider." - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "StaticRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the StaticRoute that is unique within a VnetRoute." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all address prefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The ip address of the next hop." - } - }, - "description": "List of all Static Routes." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this subnet." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private end point in the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private link service in the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "TrafficAnalyticsConfigurationProperties": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable traffic analytics." - }, - "workspaceId": { - "type": "string", - "description": "The resource guid of the attached workspace." - }, - "workspaceRegion": { - "type": "string", - "description": "The location of the attached workspace." - }, - "workspaceResourceId": { - "type": "string", - "description": "Resource Id of the attached workspace." - }, - "trafficAnalyticsInterval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficAnalyticsProperties": { - "type": "object", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficSelectorPolicy": { - "type": "object", - "properties": { - "localAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of local address spaces in CIDR format." - }, - "remoteAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of remote address spaces in CIDR format." - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "description": "An traffic selector policy for a virtual network gateway connection." - }, - "VirtualApplianceSkuProperties": { - "type": "object", - "properties": { - "vendor": { - "type": "string", - "description": "Virtual Appliance Vendor." - }, - "bundledScaleUnit": { - "type": "string", - "description": "Virtual Appliance Scale Unit." - }, - "marketPlaceVersion": { - "type": "string", - "description": "Virtual Appliance Version." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "azureFirewall": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The azureFirewall associated with this VirtualHub." - }, - "securityPartnerProvider": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The securityPartnerProvider associated with this VirtualHub." - }, - "virtualNetworkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vnet connections with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "virtualHubRouteTableV2s": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all virtual hub route table v2s associated with this VirtualHub." - }, - "sku": { - "type": "string", - "description": "The sku of this VirtualHub." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualHubRouteTableV2": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VirtualHubRouteTableV2 Resource." - }, - "VirtualHubRouteTableV2Properties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "attachedConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all connections attached to this route table v2." - } - }, - "description": "Parameters for VirtualHubRouteTableV2." - }, - "VirtualHubRouteV2": { - "type": "object", - "properties": { - "destinationType": { - "type": "string", - "description": "The type of destinations." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hops." - }, - "nextHops": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NextHops ip address." - } - }, - "description": "VirtualHubRouteTableV2 route." - }, - "virtualHubs_hubRouteTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_routeTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "VirtualNetwork": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - } - }, - "required": [ - "location" - ], - "description": "Virtual Network resource." - }, - "VirtualNetworkBgpCommunities": { - "type": "object", - "properties": { - "virtualNetworkCommunity": { - "type": "string", - "description": "The BGP community associated with the virtual network." - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dead peer detection timeout of this connection in seconds." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use private local Azure IP for the connection." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnGatewayGeneration": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Generation1", - "Generation2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "enablePrivateIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether private IP needs to be enabled on this gateway for connections or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." + "description": "Reference to another subresource." }, - "gatewayDefaultSite": { + "loadBalancingSettings": { "oneOf": [ { "$ref": "#/definitions/SubResource" @@ -15314,457 +347,254 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." + "description": "Reference to another subresource." }, - "vpnClientConfiguration": { + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - }, - "enableDnsForwarding": { - "oneOf": [ - { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Whether dns forwarding is enabled or not." + "description": "Resource status." } }, - "description": "VirtualNetworkGateway properties." + "description": "The JSON object that contains the properties required to create a Backend Pool." }, - "VirtualNetworkGatewaySku": { + "BackendPoolsSettings": { "type": "object", "properties": { - "name": { + "enforceCertificateNameCheck": { "oneOf": [ { "type": "string", "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" + "Enabled", + "Disabled" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Gateway SKU name." + "description": "Whether to enforce certificate name check on HTTPS requests to all backend pools. No effect on non-HTTPS requests." }, - "tier": { + "sendRecvTimeoutSeconds": { "oneOf": [ { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] + "type": "integer", + "minimum": 16 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Gateway SKU tier." + "description": "Send and receive timeout on forwarding request to the backend. When timeout is reached, the request fails and returns." } }, - "description": "VirtualNetworkGatewaySku details." + "description": "Settings that apply to all backend pools." }, - "VirtualNetworkPeering": { + "CacheConfiguration": { "type": "object", "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { + "cacheDuration": { "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." + "format": "duration", + "description": "The duration for which the content needs to be cached. Allowed format is in ISO 8601 format (http://en.wikipedia.org/wiki/ISO_8601#Durations). HTTP requires the value to be no more than a year" }, - "useRemoteGateways": { + "dynamicCompression": { "oneOf": [ { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." + "description": "Whether to use dynamic compression for cached content." }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network address space." + "queryParameters": { + "type": "string", + "description": "query parameters to include or exclude (comma separated)." }, - "peeringState": { + "queryParameterStripDirective": { "oneOf": [ { "type": "string", "enum": [ - "Initiated", - "Connected", - "Disconnected" + "StripNone", + "StripAll", + "StripOnly", + "StripAllExcept" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The status of the virtual network peering." + "description": "Treatment of URL query terms when forming the cache key." } }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "VirtualNetworkPropertiesFormat": { + "CustomRule": { "type": "object", "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { + "action": { "oneOf": [ { - "$ref": "#/definitions/DhcpOptions" + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." + "description": "Describes what action to be applied when rule matches." }, - "subnets": { + "enabledState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of subnets in a Virtual Network." + "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified." }, - "virtualNetworkPeerings": { + "matchConditions": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VirtualNetworkPeering" + "$ref": "#/definitions/MatchCondition" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of peerings in a Virtual Network." - }, - "enableDdosProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." - }, - "enableVmProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." + "description": "List of match conditions." }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." + "name": { + "type": "string", + "maxLength": 128, + "description": "Describes the name of the rule." }, - "bgpCommunities": { + "priority": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." + "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." }, - "ipAllocations": { + "rateLimitDurationInMinutes": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } + "type": "integer", + "minimum": 0, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Array of IpAllocation which reference this VNET." - } - }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] + "description": "Time window for resetting the rate limit count. Default is 1 minute." }, - "properties": { + "rateLimitThreshold": { "oneOf": [ { - "$ref": "#/definitions/SubnetPropertiesFormat" + "type": "integer", + "minimum": 0 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] + "description": "Number of allowed requests per client within the time window." }, - "properties": { + "ruleType": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" + "type": "string", + "enum": [ + "MatchRule", + "RateLimitRule" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network peering." + "description": "Describes type of rule." } }, "required": [ - "name", - "type", - "apiVersion", - "properties" + "action", + "matchConditions", + "priority", + "ruleType" ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" + "description": "Defines contents of a web application rule" }, - "VirtualNetworkTapPropertiesFormat": { + "CustomRuleList": { "type": "object", "properties": { - "destinationNetworkInterfaceIPConfiguration": { + "rules": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "$ref": "#/definitions/CustomRule" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." + "description": "List of rules" + } + }, + "description": "Defines contents of custom rules" + }, + "ForwardingConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration" + ] }, - "destinationLoadBalancerFrontEndIPConfiguration": { + "backendPool": { "oneOf": [ { "$ref": "#/definitions/SubResource" @@ -15773,445 +603,413 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." + "description": "Reference to another subresource." }, - "destinationPort": { + "cacheConfiguration": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/CacheConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VXLAN destination port that will receive the tapped traffic." - } - }, - "description": "Virtual Network Tap properties." - }, - "VirtualRouterPeeringProperties": { - "type": "object", - "properties": { - "peerAsn": { + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." + }, + "customForwardingPath": { + "type": "string", + "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." + }, + "forwardingProtocol": { "oneOf": [ { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." + "description": "Protocol this rule will use when forwarding traffic to backends." } }, - "description": "Properties of the rule group." + "required": [ + "@odata.type" + ], + "description": "Describes Forwarding Route." }, - "VirtualRouterPropertiesFormat": { + "FrontDoorProperties": { "type": "object", "properties": { - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { + "backendPools": { "oneOf": [ { "type": "array", "items": { - "type": "string" + "$ref": "#/definitions/BackendPool" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VirtualRouter IPs." + "description": "Backend pools available to routing rules." }, - "hostedSubnet": { + "backendPoolsSettings": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/BackendPoolsSettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Subnet on which VirtualRouter is hosted." + "description": "Settings that apply to all backend pools." }, - "hostedGateway": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Gateway on which VirtualRouter is hosted." - } - }, - "description": "Virtual Router definition." - }, - "virtualRouters_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] + "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." }, - "apiVersion": { + "friendlyName": { "type": "string", - "enum": [ - "2020-04-01" - ] + "description": "A friendly name for the frontDoor" }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "VirtualWanProperties": { - "type": "object", - "properties": { - "disableVpnEncryption": { + "frontendEndpoints": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/FrontendEndpoint" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Vpn encryption to be disabled or not." + "description": "Frontend endpoints available to routing rules." }, - "allowBranchToBranchTraffic": { + "healthProbeSettings": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/HealthProbeSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if branch to branch traffic is allowed." + "description": "Health probe settings associated with this Front Door instance." }, - "allowVnetToVnetTraffic": { + "loadBalancingSettings": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/LoadBalancingSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if Vnet to Vnet traffic is allowed." + "description": "Load balancing settings associated with this Front Door instance." }, - "office365LocalBreakoutCategory": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The office local breakout category." + "description": "Resource status of the Front Door." }, - "type": { - "type": "string", - "description": "The type of the VirtualWAN." - } - }, - "description": "Parameters for VirtualWAN." - }, - "VnetRoute": { - "type": "object", - "properties": { - "staticRoutes": { + "routingRules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/StaticRoute" + "$ref": "#/definitions/RoutingRule" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all Static Routes." + "description": "Routing rules associated with this Front Door." } }, - "description": "List of routes that control routing from VirtualHub into a virtual network connection." + "description": "The JSON object that contains the properties required to create an endpoint." }, - "VpnClientConfiguration": { + "frontDoors_rulesEngines_childResource": { "type": "object", "properties": { - "vpnClientAddressPool": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-04-01" + ] + }, + "name": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "type": "string", + "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$", + "minLength": 1, + "maxLength": 90 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." + "description": "Name of the Rules Engine which is unique within the Front Door." }, - "vpnClientRootCertificates": { + "properties": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } + "$ref": "#/definitions/RulesEngineProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRootCertificate for virtual network gateway." + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." + }, + "type": { + "type": "string", + "enum": [ + "rulesEngines" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/frontDoors/rulesEngines" + }, + "FrontendEndpoint": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." }, - "vpnClientRevokedCertificates": { + "properties": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } + "$ref": "#/definitions/FrontendEndpointProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." + "description": "The JSON object that contains the properties required to create a frontend endpoint." + } + }, + "description": "A frontend endpoint used for routing." + }, + "FrontendEndpointProperties": { + "type": "object", + "properties": { + "hostName": { + "type": "string", + "description": "The host name of the frontendEndpoint. Must be a domain name." }, - "vpnClientProtocols": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientProtocols for Virtual network gateway." + "description": "Resource status." }, - "vpnClientIpsecPolicies": { + "sessionAffinityEnabledState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." + "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." }, - "radiusServers": { + "sessionAffinityTtlSeconds": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The radiusServers property for multiple radius server configuration." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." + "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - } - }, - "description": "VpnClientConfiguration for P2S client." - }, - "VpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" + "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" } }, - "description": "VPN client revoked certificate of virtual network gateway." + "description": "The JSON object that contains the properties required to create a frontend endpoint." }, - "VpnClientRevokedCertificatePropertiesFormat": { + "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { "type": "object", "properties": { - "thumbprint": { + "id": { "type": "string", - "description": "The revoked VPN client certificate thumbprint." + "description": "Resource ID." } }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" }, - "VpnClientRootCertificate": { + "HeaderAction": { "type": "object", "properties": { - "properties": { + "headerActionType": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" + "type": "string", + "enum": [ + "Append", + "Delete", + "Overwrite" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client root certificate." + "description": "Which type of manipulation to apply to the header." }, - "name": { + "headerName": { "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { + "description": "The name of the header this action will apply to." + }, + "value": { "type": "string", - "description": "The certificate public data." + "description": "The value to update the given header name with. This value is not used if the actionType is Delete." } }, "required": [ - "publicCertData" + "headerActionType", + "headerName" ], - "description": "Properties of SSL certificates of application gateway." + "description": "An action that can manipulate an http header." }, - "VpnConnection": { + "HealthProbeSettingsModel": { "type": "object", "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "$ref": "#/definitions/HealthProbeSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "The JSON object that contains the properties required to create a health probe settings." } }, - "description": "VpnConnection Resource." + "description": "Load balancing settings for a backend pool" }, - "VpnConnectionProperties": { + "HealthProbeSettingsProperties": { "type": "object", "properties": { - "remoteVpnSite": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site." + "description": "Whether to enable health probes to be made against backends defined under backendPools. Health probes can only be disabled if there is a single enabled backend in single enabled backend pool." }, - "routingWeight": { + "healthProbeMethod": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "GET", + "HEAD" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Configures which HTTP method to use to probe the backends defined under backendPools." }, - "dpdTimeoutSeconds": { + "intervalInSeconds": { "oneOf": [ { "type": "integer" @@ -16220,901 +1018,1059 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The dead peer detection timeout for a vpn connection in seconds." + "description": "The number of seconds between health probes." + }, + "path": { + "type": "string", + "description": "The path to use for the health probe. Default is /" }, - "connectionStatus": { + "protocol": { "oneOf": [ { "type": "string", "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" + "Http", + "Https" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "Protocol scheme to use for this probe." }, - "vpnConnectionProtocolType": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "IKEv2", - "IKEv1" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { + "description": "Resource status." + } + }, + "description": "The JSON object that contains the properties required to create a health probe settings." + }, + "LoadBalancingSettingsModel": { + "type": "object", + "properties": { + "id": { "type": "string", - "description": "SharedKey for the vpn connection." + "description": "Resource ID." }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." + "name": { + "type": "string", + "description": "Resource name." }, - "usePolicyBasedTrafficSelectors": { + "properties": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/LoadBalancingSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { + "description": "The JSON object that contains the properties required to create load balancing settings" + } + }, + "description": "Load balancing settings for a backend pool" + }, + "LoadBalancingSettingsProperties": { + "type": "object", + "properties": { + "additionalLatencyMilliseconds": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" }, - "enableRateLimiting": { + "resourceState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Resource status." }, - "enableInternetSecurity": { + "sampleSize": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable internet security." + "description": "The number of samples to consider for load balancing decisions" }, - "useLocalAzureIpAddress": { + "successfulSamplesRequired": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." - }, - "vpnLinkConnections": { + "description": "The number of samples within the sample period that must succeed" + } + }, + "description": "The JSON object that contains the properties required to create load balancing settings" + }, + "ManagedRuleExclusion": { + "type": "object", + "properties": { + "matchVariable": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - } + "type": "string", + "enum": [ + "RequestHeaderNames", + "RequestCookieNames", + "QueryStringArgNames", + "RequestBodyPostArgNames" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site link connections to the gateway." + "description": "The variable type to be excluded." + }, + "selector": { + "type": "string", + "description": "Selector value for which elements in the collection this exclusion applies to." }, - "routingConfiguration": { + "selectorMatchOperator": { "oneOf": [ { - "$ref": "#/definitions/RoutingConfiguration" + "type": "string", + "enum": [ + "Equals", + "Contains", + "StartsWith", + "EndsWith", + "EqualsAny" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." + "description": "Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to." } }, - "description": "Parameters for VpnConnection." + "required": [ + "matchVariable", + "selector", + "selectorMatchOperator" + ], + "description": "Exclude variables from managed rule evaluation." }, - "VpnGatewayProperties": { + "ManagedRuleGroupOverride": { "type": "object", "properties": { - "virtualHub": { + "exclusions": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualHub to which the gateway belongs." + "description": "Describes the exclusions that are applied to all rules in the group." }, - "connections": { + "ruleGroupName": { + "type": "string", + "description": "Describes the managed rule group to override." + }, + "rules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnConnection" + "$ref": "#/definitions/ManagedRuleOverride" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn connections to the gateway." - }, - "bgpSettings": { + "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." + } + }, + "required": [ + "ruleGroupName" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleOverride": { + "type": "object", + "properties": { + "action": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Local network gateway's BGP speaker settings." + "description": "Describes the override action to be applied when rule matches." }, - "vpnGatewayScaleUnit": { + "enabledState": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The scale unit for this vpn gateway." - } - }, - "description": "Parameters for VpnGateway." - }, - "vpnGateways_vpnConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] + "description": "Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified." }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-04-01" - ] - }, - "properties": { + "exclusions": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN connection." + "description": "Describes the exclusions that are applied to this specific rule." + }, + "ruleId": { + "type": "string", + "description": "Identifier for the managed rule." } }, "required": [ - "name", - "type", - "apiVersion", - "properties" + "ruleId" ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" + "description": "Defines a managed rule group override setting." }, - "VpnLinkBgpSettings": { + "ManagedRuleSet": { "type": "object", "properties": { - "asn": { + "exclusions": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - } - }, - "description": "BGP settings details for a link." - }, - "VpnLinkProviderProperties": { - "type": "object", - "properties": { - "linkProviderName": { - "type": "string", - "description": "Name of the link provider." + "description": "Describes the exclusions that are applied to all rules in the set." }, - "linkSpeedInMbps": { + "ruleGroupOverrides": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleGroupOverride" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Link speed." - } - }, - "description": "List of properties of a link provider." - }, - "VpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "name": { + "description": "Defines the rule group overrides to apply to the rule set." + }, + "ruleSetType": { "type": "string", - "description": "The certificate name." + "description": "Defines the rule set type to use." }, - "thumbprint": { + "ruleSetVersion": { "type": "string", - "description": "The Radius client root certificate thumbprint." + "description": "Defines the version of the rule set to use." } }, - "description": "Properties of the Radius client root certificate of VpnServerConfiguration." + "required": [ + "ruleSetType", + "ruleSetVersion" + ], + "description": "Defines a managed rule set." }, - "VpnServerConfigRadiusServerRootCertificate": { + "ManagedRuleSetList": { "type": "object", "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." + "managedRuleSets": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleSet" + } + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "List of rule sets." } }, - "description": "Properties of Radius Server root certificate of VpnServerConfiguration." + "description": "Defines the list of managed rule sets for the policy." }, - "VpnServerConfigurationProperties": { + "MatchCondition": { "type": "object", "properties": { - "name": { - "type": "string", - "description": "The name of the VpnServerConfiguration that is unique within a resource group." - }, - "vpnProtocols": { + "matchValue": { "oneOf": [ { "type": "array", "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] + "type": "string" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN protocols for the VpnServerConfiguration." + "description": "List of possible match values." }, - "vpnAuthenticationTypes": { + "matchVariable": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } + "type": "string", + "enum": [ + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestHeader", + "RequestBody", + "Cookies", + "SocketAddr" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN authentication types for the VpnServerConfiguration." + "description": "Request variable to compare with." }, - "vpnClientRootCertificates": { + "negateCondition": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - } + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN client root certificate of VpnServerConfiguration." + "description": "Describes if the result of this condition should be negated." }, - "vpnClientRevokedCertificates": { + "operator": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - } + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith", + "RegEx" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN client revoked certificate of VpnServerConfiguration." + "description": "Comparison type to use for matching with the variable value." }, - "radiusServerRootCertificates": { + "selector": { + "type": "string", + "description": "Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null." + }, + "transforms": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Radius Server root certificate of VpnServerConfiguration." + "description": "List of transforms." + } + }, + "required": [ + "matchValue", + "matchVariable", + "operator" + ], + "description": "Define a match condition." + }, + "PolicySettings": { + "type": "object", + "properties": { + "customBlockResponseBody": { + "oneOf": [ + { + "type": "string", + "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding." }, - "radiusClientRootCertificates": { + "customBlockResponseStatusCode": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - } + "type": "integer" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "If the action type is block, customer can override the response status code." + }, + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Radius client root certificate of VpnServerConfiguration." + "description": "Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified." }, - "vpnClientIpsecPolicies": { + "mode": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "string", + "enum": [ + "Prevention", + "Detection" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for VpnServerConfiguration." + "description": "Describes if it is in detection mode or prevention mode at policy level." + }, + "redirectUrl": { + "type": "string", + "description": "If action type is redirect, this field represents redirect URL for the client." + } + }, + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + }, + "RedirectConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorRedirectConfiguration" + ] + }, + "customFragment": { + "type": "string", + "description": "Fragment to add to the redirect URL. Fragment is the part of the URL that comes after #. Do not include the #." + }, + "customHost": { + "type": "string", + "description": "Host to redirect. Leave empty to use the incoming host as the destination host." }, - "radiusServerAddress": { + "customPath": { "type": "string", - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection." + "description": "The full path to redirect. Path cannot be empty and must start with /. Leave empty to use the incoming path as destination path." }, - "radiusServerSecret": { + "customQueryString": { "type": "string", - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection." + "description": "The set of query strings to be placed in the redirect URL. Setting this value would replace any existing query string; leave empty to preserve the incoming query string. Query string must be in = format. The first ? and & will be added automatically so do not include them in the front, but do separate multiple query strings with &." }, - "radiusServers": { + "redirectProtocol": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Multiple Radius Server configuration for VpnServerConfiguration." + "description": "The protocol of the destination to where the traffic is redirected." }, - "aadAuthenticationParameters": { + "redirectType": { "oneOf": [ { - "$ref": "#/definitions/AadAuthenticationParameters" + "type": "string", + "enum": [ + "Moved", + "Found", + "TemporaryRedirect", + "PermanentRedirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of aad vpn authentication parameters." + "description": "The redirect type the rule will use when redirecting traffic." } }, - "description": "Parameters for VpnServerConfiguration." + "required": [ + "@odata.type" + ], + "description": "Describes Redirect Route." }, - "VpnServerConfigVpnClientRevokedCertificate": { + "RouteConfiguration": { "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." + "oneOf": [ + { + "$ref": "#/definitions/ForwardingConfiguration" }, - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." + { + "$ref": "#/definitions/RedirectConfiguration" } - }, - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration." + ], + "properties": {}, + "description": "Base class for all types of Route." }, - "VpnServerConfigVpnClientRootCertificate": { + "RoutingRule": { "type": "object", "properties": { - "name": { + "id": { "type": "string", - "description": "The certificate name." + "description": "Resource ID." }, - "publicCertData": { + "name": { "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of VPN client root certificate of VpnServerConfiguration." - }, - "VpnSiteLink": { - "type": "object", - "properties": { + "description": "Resource name." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkProperties" + "$ref": "#/definitions/RoutingRuleProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "The JSON object that contains the properties required to create a routing rule." } }, - "description": "VpnSiteLink Resource." + "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." }, - "VpnSiteLinkConnection": { + "RoutingRuleProperties": { "type": "object", "properties": { - "properties": { + "acceptedProtocols": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Http", + "Https" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link connection." + "description": "Protocol schemes to match for this rule" }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLinkConnection Resource." - }, - "VpnSiteLinkConnectionProperties": { - "type": "object", - "properties": { - "vpnSiteLink": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site link." + "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." }, - "routingWeight": { + "frontendEndpoints": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/SubResource" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Frontend endpoints associated with this rule" }, - "connectionStatus": { + "patternsToMatch": { "oneOf": [ { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "The route patterns of the rule." }, - "vpnConnectionProtocolType": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "IKEv2", - "IKEv1" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "Resource status." }, - "connectionBandwidth": { + "routeConfiguration": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/RouteConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." + "description": "Base class for all types of Route." }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { + "rulesEngine": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Reference to another subresource." }, - "usePolicyBasedTrafficSelectors": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/RoutingRuleUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { + "description": "Defines the Web Application Firewall policy for each routing rule (if applicable)" + } + }, + "description": "The JSON object that contains the properties required to create a routing rule." + }, + "RoutingRuleUpdateParametersWebApplicationFirewallPolicyLink": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Defines the Web Application Firewall policy for each routing rule (if applicable)" + }, + "RulesEngineAction": { + "type": "object", + "properties": { + "requestHeaderActions": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "$ref": "#/definitions/HeaderAction" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "A list of header actions to apply from the request from AFD to the origin." }, - "enableRateLimiting": { + "responseHeaderActions": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/HeaderAction" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "A list of header actions to apply from the response from AFD to the client." }, - "useLocalAzureIpAddress": { + "routeConfigurationOverride": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/RouteConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." + "description": "Base class for all types of Route." } }, - "description": "Parameters for VpnConnection." + "description": "One or more actions that will execute, modifying the request and/or response." }, - "VpnSiteLinkProperties": { + "RulesEngineMatchCondition": { "type": "object", "properties": { - "linkProperties": { + "negateCondition": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkProviderProperties" + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The link provider properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site-link." - }, - "fqdn": { - "type": "string", - "description": "FQDN of vpn-site-link." + "description": "Describes if this is negate condition or not" }, - "bgpProperties": { + "rulesEngineMatchValue": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkBgpSettings" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." - } - }, - "description": "Parameters for VpnSite." - }, - "VpnSiteProperties": { - "type": "object", - "properties": { - "virtualWan": { + "description": "Match values to match against. The operator will apply to each value in here with OR semantics. If any of them match the variable with the given operator this match condition is considered a match." + }, + "rulesEngineMatchVariable": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "IsMobile", + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestPath", + "RequestFilename", + "RequestFilenameExtension", + "RequestHeader", + "RequestBody", + "RequestScheme" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualWAN to which the vpnSite belongs." + "description": "Match Variable." }, - "deviceProperties": { + "rulesEngineOperator": { "oneOf": [ { - "$ref": "#/definitions/DeviceProperties" + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." + "description": "Describes operator to apply to the match condition." }, - "siteKey": { + "selector": { "type": "string", - "description": "The key for vpn-site that can be used for connections." + "description": "Name of selector in RequestHeader or RequestBody to be matched" }, - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges." - }, - "bgpProperties": { + "transforms": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." - }, - "isSecuritySite": { + "description": "List of transforms" + } + }, + "required": [ + "rulesEngineMatchValue", + "rulesEngineMatchVariable", + "rulesEngineOperator" + ], + "description": "Define a match condition" + }, + "RulesEngineProperties": { + "type": "object", + "properties": { + "resourceState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag." + "description": "Resource status." }, - "vpnSiteLinks": { + "rules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnSiteLink" + "$ref": "#/definitions/RulesEngineRule" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site links." + "description": "A list of rules that define a particular Rules Engine Configuration." } }, - "description": "Parameters for VpnSite." + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." }, - "WebApplicationFirewallCustomRule": { + "RulesEngineRule": { "type": "object", "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource." - }, - "priority": { + "action": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/RulesEngineAction" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + "description": "One or more actions that will execute, modifying the request and/or response." }, - "ruleType": { + "matchConditions": { "oneOf": [ { - "type": "string", - "enum": [ - "MatchRule", - "Invalid" - ] + "type": "array", + "items": { + "$ref": "#/definitions/RulesEngineMatchCondition" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The rule type." + "description": "A list of match conditions that must meet in order for the actions of this rule to run. Having no match conditions means the actions will always run." }, - "matchConditions": { + "matchProcessingBehavior": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/MatchCondition" - } + "type": "string", + "enum": [ + "Continue", + "Stop" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of match conditions." + "description": "If this rule is a match should the rules engine continue running the remaining rules or stop. If not present, defaults to Continue." }, - "action": { + "name": { + "type": "string", + "description": "A name to refer to this specific rule." + }, + "priority": { "oneOf": [ { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Type of Actions." + "description": "A priority assigned to this rule. " } }, "required": [ - "priority", - "ruleType", - "matchConditions", - "action" + "action", + "name", + "priority" ], - "description": "Defines contents of a web application rule." + "description": "Contains a list of match conditions, and an action on how to modify the request/response. If multiple rules match, the actions from one rule that conflict with a previous rule overwrite for a singular action, or append in the case of headers manipulation." }, - "WebApplicationFirewallPolicyPropertiesFormat": { + "SubResource": { "type": "object", "properties": { - "policySettings": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." + }, + "WebApplicationFirewallPolicyProperties": { + "type": "object", + "properties": { + "customRules": { "oneOf": [ { - "$ref": "#/definitions/PolicySettings" + "$ref": "#/definitions/CustomRuleList" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The PolicySettings for policy." + "description": "Defines contents of custom rules" }, - "customRules": { + "managedRules": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } + "$ref": "#/definitions/ManagedRuleSetList" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The custom rules inside the policy." + "description": "Defines the list of managed rule sets for the policy." }, - "managedRules": { + "policySettings": { "oneOf": [ { - "$ref": "#/definitions/ManagedRulesDefinition" + "$ref": "#/definitions/PolicySettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes the managedRules structure." + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." } }, - "required": [ - "managedRules" - ], "description": "Defines web application firewall policy properties." } } diff --git a/schemas/2020-05-01/Microsoft.Network.json b/schemas/2020-05-01/Microsoft.Network.json index c38c743f0b..393c3ef73b 100644 --- a/schemas/2020-05-01/Microsoft.Network.json +++ b/schemas/2020-05-01/Microsoft.Network.json @@ -4,17061 +4,408 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "frontDoors": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of the application gateway, if configured." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationGateways" - }, - "applicationGateways_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private endpoint connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" - }, - "ApplicationGatewayWebApplicationFirewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the web application firewall policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - }, - "applicationSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application security group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" - }, - "bastionHosts": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Bastion Host." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the bastion host resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/bastionHosts" - }, - "connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/connections" - }, - "ddosCustomPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS custom policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ddosCustomPolicies" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of ExpressRoutePort, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "firewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the firewall policy." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of the firewall policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies" - }, - "firewallPolicies_ruleCollectionGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "IpAllocations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/IpAllocations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpAllocation." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/IpAllocations" - }, - "ipGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ipGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpGroups." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ipGroups" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_backendAddressPools": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkVirtualAppliances": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Network Virtual Appliance." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The service principal that has read access to cloud-init and config blob." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateEndpoints_privateDnsZoneGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "securityPartnerProviders": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Security Partner Provider." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/securityPartnerProviders" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualHubs_bgpConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualRouters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Router." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualRouters" - }, - "virtualRouters_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnServerConfigurations" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "type": "object", - "properties": { - "aadTenant": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD tenant." - }, - "aadAudience": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD audience." - }, - "aadIssuer": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD issuer." - } - }, - "description": "AAD Vpn authentication type related parameters." - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - }, - "privateLinkConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the application gateway private link configuration." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "hostNames": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of Private Link Resource of an application gateway." - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private link configuration." - }, - "name": { - "type": "string", - "description": "Name of the private link configuration that is unique within an Application Gateway." - } - }, - "description": "Private Link Configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of application gateway private link ip configurations." - } - }, - "description": "Properties of private link configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of an application gateway private link ip configuration." - }, - "name": { - "type": "string", - "description": "The name of application gateway private link ip configuration." - } - }, - "description": "The application gateway private link ip configuration." - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - } - }, - "description": "Properties of an application gateway private link IP configuration." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "privateLinkConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "PrivateLink configurations on application gateway." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - }, - "forceFirewallPolicyAssociation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 20000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the request routing rule." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - }, - "urlConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url Configuration Action in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this paramter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "applicationGateways_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private endpoint connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlConfiguration": { - "type": "object", - "properties": { - "modifiedPath": { - "type": "string", - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null." - }, - "modifiedQueryString": { - "type": "string", - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null." - }, - "reroute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false." - } - }, - "description": "Url configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of Application Protocols." - }, - "targetUrls": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Urls for this rule condition." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "terminateTLS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Terminate TLS connections for this rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type application." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https", - "Mssql" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "managementIpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall used for management traffic." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the firewall belongs." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The firewallPolicy associated with this azure firewall." - }, - "hubIPAddresses": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP addresses associated with AzureFirewall." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure Firewall Resource SKU." - }, - "additionalProperties": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional properties used to further config this azure firewall." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallPublicIPAddress": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "Public IP Address value." - } - }, - "description": "Public IP Address associated with azure firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "AzureFirewallSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an Azure Firewall SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an Azure Firewall." - } - }, - "description": "SKU of an Azure Firewall." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "loadBalancerBackendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of backend addresses." - } - }, - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpConnectionProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the bgp connection." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - }, - "bgpPeeringAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BGP peering address with IP configuration ID for virtual network gateway." - } - }, - "description": "BGP settings details." - }, - "BreakOutCategoryPolicies": { - "type": "object", - "properties": { - "allow": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 allow category." - }, - "optimize": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 optimize category." - }, - "default": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 default category." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorEndpoint": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor endpoint." - }, - "resourceId": { - "type": "string", - "description": "Resource ID of the connection monitor endpoint." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor endpoint (IP or domain name)." - }, - "filter": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Filter for sub-items within the endpoint." - } - }, - "required": [ - "name" - ], - "description": "Describes the connection monitor endpoint." - }, - "ConnectionMonitorEndpointFilter": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Include" - ], - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported." - }, - "items": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items in the filter." - } - }, - "description": "Describes the connection monitor endpoint filter." - }, - "ConnectionMonitorEndpointFilterItem": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "AgentAddress" - ], - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported." - }, - "address": { - "type": "string", - "description": "The address of the filter item." - } - }, - "description": "Describes the connection monitor endpoint filter item." - }, - "ConnectionMonitorHttpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "method": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Get", - "Post" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP method to use." - }, - "path": { - "type": "string", - "description": "The path component of the URI. For instance, \"/dir1/dir2\"." - }, - "requestHeaders": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HTTPHeader" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP headers to transmit with the request." - }, - "validStatusCodeRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\"." - }, - "preferHTTPS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit." - } - }, - "description": "Describes the HTTP configuration." - }, - "ConnectionMonitorIcmpConfiguration": { - "type": "object", - "properties": { - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the ICMP configuration." - }, - "ConnectionMonitorOutput": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Workspace" - ], - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported." - }, - "workspaceSettings": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the settings for producing output into a log analytics workspace." - } - }, - "description": "Describes a connection monitor output destination." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - }, - "endpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor endpoints." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test configurations." - }, - "testGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test groups." - }, - "outputs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor outputs." - }, - "notes": { - "type": "string", - "description": "Optional notes to be associated with the connection monitor." - } - }, - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ConnectionMonitorSuccessThreshold": { - "type": "object", - "properties": { - "checksFailedPercent": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful." - }, - "roundTripTimeMs": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful." - } - }, - "description": "Describes the threshold for declaring a test successful." - }, - "ConnectionMonitorTcpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the TCP configuration." - }, - "ConnectionMonitorTestConfiguration": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test configuration." - }, - "testFrequencySec": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The frequency of test evaluation, in seconds." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Http", - "Icmp" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol to use in test evaluation." - }, - "preferredIPVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters." - }, - "httpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over HTTP." - }, - "tcpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over TCP." - }, - "icmpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over ICMP." - }, - "successThreshold": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The threshold for declaring a test successful." - } - }, - "required": [ - "name", - "protocol" - ], - "description": "Describes a connection monitor test configuration." - }, - "ConnectionMonitorTestGroup": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test group." - }, - "disable": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether test group is disabled." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of test configuration names." - }, - "sources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source endpoint names." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination endpoint names." - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "description": "Describes the connection monitor test group." - }, - "ConnectionMonitorWorkspaceSettings": { - "type": "object", - "properties": { - "workspaceResourceId": { - "type": "string", - "description": "Log analytics workspace resource ID." - } - }, - "description": "Describes the settings for producing output into a log analytics workspace." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "CustomDnsConfigPropertiesFormat": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fqdn that resolves to private endpoint ip address." - }, - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of private ip addresses of the private endpoint." - } - }, - "description": "Contains custom Dns resolution configuration from customer." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - }, - "protectedIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enables DDoS protection on the public IP." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "DnsSettings": { - "type": "object", - "properties": { - "servers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Custom DNS Servers." - }, - "enableProxy": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy." - }, - "requireProxyForNetworkRules": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "FQDNs in Network Rules are supported when set to true." - } - }, - "description": "DNS Proxy Settings in Firewall Policy." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - }, - "ipv6CircuitConnectionConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IPv6 Address PrefixProperties of the express route circuit connection." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering stats of express route circuit." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Primary BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The primary BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The peering location of the ExpressRoute circuit." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The circuit bandwidth In Mbps." - }, - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkMacSecConfig": { - "type": "object", - "properties": { - "cknSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CKN key." - }, - "cakSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CAK key." - }, - "cipher": { - "oneOf": [ - { - "type": "string", - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Mac security cipher." - } - }, - "description": "ExpressRouteLink Mac Security Configuration." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - }, - "macSecConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "MacSec configuration." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "FirewallPolicyCertificateAuthority": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthorityPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the certificate authority." - }, - "name": { - "type": "string", - "description": "Name of the CA certificate." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FirewallPolicyCertificateAuthorityPropertiesFormat": { - "type": "object", - "properties": { - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FirewallPolicyFilterRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Filter rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy Filter Rule Collection." - }, - "FirewallPolicyFilterRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction." - }, - "FirewallPolicyNatRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Nat rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy NAT Rule Collection." - }, - "FirewallPolicyNatRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "DNAT" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyNatRuleCollectionAction." - }, - "FirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "basePolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parent firewall policy from which rules are inherited." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "threatIntelWhitelist": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "intrusionSystemMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Intrusion system." - }, - "transportSecurity": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "TLS Configuration definition." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "DNS Proxy Settings definition." - } - }, - "description": "Firewall Policy definition." - }, - "FirewallPolicyRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/ApplicationRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NatRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NetworkRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "Name of the rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Properties of a rule." - }, - "FirewallPolicyRuleApplicationProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000." - } - }, - "description": "Properties of the application rule protocol." - }, - "FirewallPolicyRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "The name of the rule collection." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection resource." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Properties of the rule collection." - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection Group resource." - }, - "ruleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Group of Firewall Policy rule collections." - } - }, - "description": "Properties of the rule collection group." - }, - "FirewallPolicyThreatIntelWhitelist": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of IP addresses for the ThreatIntel Whitelist." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for the ThreatIntel Whitelist." - } - }, - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "FirewallPolicyTransportSecurity": { - "type": "object", - "properties": { - "certificateAuthority": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CA used for intermediate CA generation." - }, - "excludedDomains": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of domains which are excluded from TLS termination." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Certificates which are to be trusted by the firewall." - } - }, - "description": "Configuration needed to perform TLS termination & initiation." - }, - "FirewallPolicyTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the trusted root authorities." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within a firewall policy." - } - }, - "description": "Trusted Root certificates of a firewall policy." - }, - "FirewallPolicyTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) the public certificate data stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FlowLogFormatParameters": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "JSON" - ], - "description": "The file type of flow log." - }, - "version": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The version (revision) of the flow log." - } - }, - "description": "Parameters that define the flow log format." - }, - "FlowLogPropertiesFormat": { - "type": "object", - "properties": { - "targetResourceId": { - "type": "string", - "description": "ID of network security group to which flow log will be applied." - }, - "storageId": { - "type": "string", - "description": "ID of the storage account which is used to store the flow log." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable flow logging." - }, - "retentionPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the retention policy for flow log." - }, - "format": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the flow log format." - }, - "flowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "description": "Parameters that define the configuration of flow log." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HTTPHeader": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name in HTTP header." - }, - "value": { - "type": "string", - "description": "The value in HTTP header." - } - }, - "description": "The HTTP header." - }, - "HubIPAddresses": { - "type": "object", - "properties": { - "publicIPs": { - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP addresses associated with azure firewall." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP Address associated with azure firewall." - } - }, - "description": "IP addresses associated with azure firewall." - }, - "HubIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of IP configuration." - }, - "HubPublicIPAddresses": { - "type": "object", - "properties": { - "addresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of Public IP addresses associated with azure firewall." - }, - "count": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP Address associated with azure firewall." - } - }, - "description": "Public IP addresses associated with azure firewall." - }, - "HubRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route." - }, - "destinationType": { - "type": "string", - "description": "The type of destinations (eg: CIDR, ResourceId, Service)." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hop (eg: ResourceId)." - }, - "nextHop": { - "type": "string", - "description": "NextHop resource ID." - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "description": "RouteTable route." - }, - "HubRouteTableProperties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of labels associated with this route table." - } - }, - "description": "Parameters for RouteTable." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "IpAllocationPropertiesFormat": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Undefined", - "Hypernet" - ], - "description": "The type for the IpAllocation." - }, - "prefix": { - "type": "string", - "description": "The address prefix for the IpAllocation." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix length for the IpAllocation." - }, - "prefixType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix Type for the IpAllocation." - }, - "ipamAllocationId": { - "type": "string", - "description": "The IPAM allocation ID." - }, - "allocationTags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAllocation tags." - } - }, - "description": "Properties of the IpAllocation." - }, - "IPConfigurationBgpPeeringAddress": { - "type": "object", - "properties": { - "ipconfigurationId": { - "type": "string", - "description": "The ID of IP configuration which belongs to gateway." - }, - "customBgpIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of custom BGP peering addresses which belong to IP configuration." - } - }, - "description": "Properties of IPConfigurationBgpPeeringAddress." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpGroupPropertiesFormat": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource." - } - }, - "description": "The IpGroups property information." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "The IP tag type. Example: FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "The value of the IP tag associated with the public IP. Example: SQL." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6CircuitConnectionConfig": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "/125 IP address space to carve out customer addresses for global reach." - } - }, - "description": "IPv6 Circuit Connection properties for global reach." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerBackendAddress": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address." - } - }, - "description": "Load balancer backend addresses." - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to an existing virtual network." - }, - "ipAddress": { - "type": "string", - "description": "IP Address belonging to the referenced virtual network." - } - }, - "description": "Properties of the load balancer backend addresses." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_backendAddressPools_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "fqdn": { - "type": "string", - "description": "FQDN of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedRuleGroupOverride": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The managed rule group to override." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRuleOverride": { - "type": "object", - "properties": { - "ruleId": { - "type": "string", - "description": "Identifier for the managed rule." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the managed rule. Defaults to Disabled if not specified." - } - }, - "required": [ - "ruleId" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRulesDefinition": { - "type": "object", - "properties": { - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Exclusions that are applied on the policy." - }, - "managedRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The managed rule sets that are associated with the policy." - } - }, - "required": [ - "managedRuleSets" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ManagedRuleSet": { - "type": "object", - "properties": { - "ruleSetType": { - "type": "string", - "description": "Defines the rule set type to use." - }, - "ruleSetVersion": { - "type": "string", - "description": "Defines the version of the rule set to use." - }, - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the rule group overrides to apply to the rule set." - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "description": "Defines a managed rule set." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "The selector of match variable." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NatRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type nat." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type network." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "type": "object", - "properties": { - "nvaSku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network Virtual Appliance SKU." - }, - "bootStrapConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BootStrapConfigurationBlobs storage URLs." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where Network Virtual Appliance is being deployed." - }, - "cloudInitConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "CloudInitConfigurationBlob storage URLs." - }, - "cloudInitConfiguration": { - "type": "string", - "description": "CloudInitConfiguration string in plain text." - }, - "virtualApplianceAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualAppliance ASN." - } - }, - "description": "Network Virtual Appliance definition." - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "Office365PolicyProperties": { - "type": "object", - "properties": { - "breakOutCategories": { - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 breakout categories." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "OwaspCrsExclusionEntry": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "P2SConnectionConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2S connection configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SConnectionConfiguration Resource." - }, - "P2SConnectionConfigurationProperties": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for P2SConnectionConfiguration." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "p2SConnectionConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all p2s connection configurations of the gateway." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "vpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "customDnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all customer specified DNS servers IP addresses." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "The storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the policy." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The mode of the policy." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow WAF to check request Body." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateDnsZoneConfig": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone configuration." - } - }, - "description": "PrivateDnsZoneConfig resource." - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of private dns zone configurations of the private dns zone group." - } - }, - "description": "Properties of the private dns zone group." - }, - "PrivateDnsZonePropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneId": { - "type": "string", - "description": "The resource id of the private dns zone." - } - }, - "description": "Properties of the private dns zone configuration resource." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - }, - "customDnsConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of custom dns configurations." - } - }, - "description": "Properties of the private endpoint." - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionsRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of private link service IP configurations." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - }, - "enableProxyProtocol": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the private link service is enabled for proxy protocol or not." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "PropagatedRouteTable": { - "type": "object", - "properties": { - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of labels." - }, - "ids": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of resource ids of all the RouteTables." - } - }, - "description": "The list of RouteTables to advertise the routes to." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddress": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "location" - ], - "description": "Public IP address resource." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "RadiusServer": { - "type": "object", - "properties": { - "radiusServerAddress": { - "type": "string", - "description": "The address of this radius server." - }, - "radiusServerScore": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The initial score assigned to this radius server." - }, - "radiusServerSecret": { - "type": "string", - "description": "The secret used for this radius server." - } - }, - "required": [ - "radiusServerAddress" - ], - "description": "Radius Server Settings." - }, - "RetentionPolicyParameters": { - "type": "object", - "properties": { - "days": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days to retain flow log records." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable retention." - } - }, - "description": "Parameters that define the retention policy for flow log." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "RoutingConfiguration": { - "type": "object", - "properties": { - "associatedRouteTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The resource id RouteTable associated with this RoutingConfiguration." - }, - "propagatedRouteTables": { - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of RouteTables to advertise the routes to." - }, - "vnetRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - } - }, - "description": "Routing Configuration indicating the associated and propagated route tables for this connection." - }, - "SecurityPartnerProviderPropertiesFormat": { - "type": "object", - "properties": { - "securityProviderName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The security provider name." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the Security Partner Provider belongs." - } - }, - "description": "Properties of the Security Partner Provider." - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "StaticRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the StaticRoute that is unique within a VnetRoute." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all address prefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The ip address of the next hop." - } - }, - "description": "List of all Static Routes." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this subnet." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private end point in the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private link service in the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "TrafficAnalyticsConfigurationProperties": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable traffic analytics." - }, - "workspaceId": { - "type": "string", - "description": "The resource guid of the attached workspace." - }, - "workspaceRegion": { - "type": "string", - "description": "The location of the attached workspace." - }, - "workspaceResourceId": { - "type": "string", - "description": "Resource Id of the attached workspace." - }, - "trafficAnalyticsInterval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficAnalyticsProperties": { - "type": "object", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficSelectorPolicy": { - "type": "object", - "properties": { - "localAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of local address spaces in CIDR format." - }, - "remoteAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of remote address spaces in CIDR format." - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "description": "An traffic selector policy for a virtual network gateway connection." - }, - "VirtualApplianceSiteProperties": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "Address Prefix." - }, - "o365Policy": { - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 Policy." - } - }, - "description": "Properties of the rule group." - }, - "VirtualApplianceSkuProperties": { - "type": "object", - "properties": { - "vendor": { - "type": "string", - "description": "Virtual Appliance Vendor." - }, - "bundledScaleUnit": { - "type": "string", - "description": "Virtual Appliance Scale Unit." - }, - "marketPlaceVersion": { - "type": "string", - "description": "Virtual Appliance Version." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "azureFirewall": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The azureFirewall associated with this VirtualHub." - }, - "securityPartnerProvider": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The securityPartnerProvider associated with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "virtualHubRouteTableV2s": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all virtual hub route table v2s associated with this VirtualHub." - }, - "sku": { - "type": "string", - "description": "The sku of this VirtualHub." - }, - "routingState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Provisioned", - "Provisioning", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing state." - }, - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualHubRouteTableV2": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VirtualHubRouteTableV2 Resource." - }, - "VirtualHubRouteTableV2Properties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "attachedConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all connections attached to this route table v2." - } - }, - "description": "Parameters for VirtualHubRouteTableV2." - }, - "VirtualHubRouteV2": { - "type": "object", - "properties": { - "destinationType": { - "type": "string", - "description": "The type of destinations." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hops." - }, - "nextHops": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NextHops ip address." - } - }, - "description": "VirtualHubRouteTableV2 route." - }, - "virtualHubs_bgpConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "VirtualNetworkBgpCommunities": { - "type": "object", - "properties": { - "virtualNetworkCommunity": { - "type": "string", - "description": "The BGP community associated with the virtual network." - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dead peer detection timeout of this connection in seconds." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use private local Azure IP for the connection." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnGatewayGeneration": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Generation1", - "Generation2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "enablePrivateIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether private IP needs to be enabled on this gateway for connections or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." - }, - "gatewayDefaultSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." - }, - "vpnClientConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - }, - "enableDnsForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether dns forwarding is enabled or not." - } - }, - "description": "VirtualNetworkGateway properties." - }, - "VirtualNetworkGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU name." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU tier." - } - }, - "description": "VirtualNetworkGatewaySku details." - }, - "VirtualNetworkPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." - }, - "useRemoteGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." - }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network address space." - }, - "peeringState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The status of the virtual network peering." - } - }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." - }, - "VirtualNetworkPropertiesFormat": { - "type": "object", - "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." - }, - "subnets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of subnets in a Virtual Network." - }, - "virtualNetworkPeerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of peerings in a Virtual Network." - }, - "enableDdosProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." - }, - "enableVmProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." - }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." - }, - "bgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this VNET." - } - }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "subnets" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-05-01" ] }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" - ] + "location": { + "type": "string", + "description": "Resource location." }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { + "name": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "pattern": "^[a-zA-Z0-9]+([-a-zA-Z0-9]?[a-zA-Z0-9])*$", + "minLength": 5, + "maxLength": 64 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." + "description": "Name of the Front Door which is globally unique." }, - "destinationLoadBalancerFrontEndIPConfiguration": { + "properties": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/FrontDoorProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." + "description": "The JSON object that contains the properties required to create an endpoint." }, - "destinationPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VXLAN destination port that will receive the tapped traffic." - } - }, - "description": "Virtual Network Tap properties." - }, - "VirtualRouterPeeringProperties": { - "type": "object", - "properties": { - "peerAsn": { + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/frontDoors_rulesEngines_childResource" + } + ] + } + }, + "tags": { "oneOf": [ { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Peer ASN." + "description": "Resource tags." }, - "peerIp": { + "type": { "type": "string", - "description": "Peer IP." + "enum": [ + "Microsoft.Network/frontDoors" + ] } }, - "description": "Properties of the rule group." + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/frontDoors" }, - "VirtualRouterPropertiesFormat": { + "frontDoors_rulesEngines": { "type": "object", "properties": { - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." + "apiVersion": { + "type": "string", + "enum": [ + "2020-05-01" + ] }, - "hostedSubnet": { + "name": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$", + "minLength": 1, + "maxLength": 90 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Subnet on which VirtualRouter is hosted." + "description": "Name of the Rules Engine which is unique within the Front Door." }, - "hostedGateway": { + "properties": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/RulesEngineProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Gateway on which VirtualRouter is hosted." - } - }, - "description": "Virtual Router definition." - }, - "virtualRouters_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." }, "type": { "type": "string", "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-05-01" + "Microsoft.Network/frontDoors/rulesEngines" ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "VirtualWanProperties": { + "description": "Microsoft.Network/frontDoors/rulesEngines" + } + }, + "definitions": { + "Backend": { "type": "object", "properties": { - "disableVpnEncryption": { + "address": { + "type": "string", + "description": "Location of the backend (IP address or FQDN)" + }, + "backendHostHeader": { + "type": "string", + "description": "The value to use as the host header sent to the backend. If blank or unspecified, this defaults to the incoming host." + }, + "enabledState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Vpn encryption to be disabled or not." + "description": "Whether to enable use of this backend. Permitted values are 'Enabled' or 'Disabled'." }, - "allowBranchToBranchTraffic": { + "httpPort": { "oneOf": [ { - "type": "boolean" + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if branch to branch traffic is allowed." + "description": "The HTTP TCP port number. Must be between 1 and 65535." }, - "allowVnetToVnetTraffic": { + "httpsPort": { "oneOf": [ { - "type": "boolean" + "type": "integer", + "minimum": 1, + "maximum": 65535 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "True if Vnet to Vnet traffic is allowed." + "description": "The HTTPS TCP port number. Must be between 1 and 65535." }, - "office365LocalBreakoutCategory": { + "priority": { "oneOf": [ { - "type": "string", - "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" - ] + "type": "integer", + "minimum": 1, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The office local breakout category." + "description": "Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy." }, - "type": { + "privateLinkAlias": { "type": "string", - "description": "The type of the VirtualWAN." - } - }, - "description": "Parameters for VirtualWAN." - }, - "VnetRoute": { - "type": "object", - "properties": { - "staticRoutes": { + "description": "The Alias of the Private Link resource. Populating this optional field indicates that this backend is 'Private'" + }, + "privateLinkApprovalMessage": { + "type": "string", + "description": "A custom message to be included in the approval request to connect to the Private Link" + }, + "privateLinkLocation": { + "type": "string", + "description": "The location of the Private Link resource. Required only if 'privateLinkResourceId' is populated" + }, + "privateLinkResourceId": { + "type": "string", + "description": "The Resource Id of the Private Link resource. Populating this optional field indicates that this backend is 'Private'" + }, + "weight": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/StaticRoute" - } + "type": "integer", + "minimum": 1, + "maximum": 1000 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all Static Routes." + "description": "Weight of this endpoint for load balancing purposes." } }, - "description": "List of routes that control routing from VirtualHub into a virtual network connection." + "description": "Backend address of a frontDoor load balancer." }, - "VpnClientConfiguration": { + "BackendPool": { "type": "object", "properties": { - "vpnClientAddressPool": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." + }, + "properties": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "$ref": "#/definitions/BackendPoolProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { + "description": "The JSON object that contains the properties required to create a Backend Pool." + } + }, + "description": "A backend pool is a collection of backends that can be routed to." + }, + "BackendPoolProperties": { + "type": "object", + "properties": { + "backends": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnClientRootCertificate" + "$ref": "#/definitions/Backend" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRootCertificate for virtual network gateway." + "description": "The set of backends for this pool" }, - "vpnClientRevokedCertificates": { + "healthProbeSettings": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." + "description": "Reference to another subresource." }, - "vpnClientProtocols": { + "loadBalancingSettings": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientProtocols for Virtual network gateway." + "description": "Reference to another subresource." }, - "vpnClientIpsecPolicies": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServers": { + "description": "Resource status." + } + }, + "description": "The JSON object that contains the properties required to create a Backend Pool." + }, + "BackendPoolsSettings": { + "type": "object", + "properties": { + "enforceCertificateNameCheck": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The radiusServers property for multiple radius server configuration." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." + "description": "Whether to enforce certificate name check on HTTPS requests to all backend pools. No effect on non-HTTPS requests." }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - } - }, - "description": "VpnClientConfiguration for P2S client." - }, - "VpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { + "sendRecvTimeoutSeconds": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" + "type": "integer", + "minimum": 16 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Send and receive timeout on forwarding request to the backend. When timeout is reached, the request fails and returns." } }, - "description": "VPN client revoked certificate of virtual network gateway." + "description": "Settings that apply to all backend pools." }, - "VpnClientRevokedCertificatePropertiesFormat": { + "CacheConfiguration": { "type": "object", "properties": { - "thumbprint": { + "cacheDuration": { "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { + "format": "duration", + "description": "The duration for which the content needs to be cached. Allowed format is in ISO 8601 format (http://en.wikipedia.org/wiki/ISO_8601#Durations). HTTP requires the value to be no more than a year" + }, + "dynamicCompression": { "oneOf": [ { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the vpn client root certificate." + "description": "Whether to use dynamic compression for cached content." }, - "name": { + "queryParameters": { "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway." - }, - "VpnConnection": { - "type": "object", - "properties": { - "properties": { + "description": "query parameters to include or exclude (comma separated)." + }, + "queryParameterStripDirective": { "oneOf": [ { - "$ref": "#/definitions/VpnConnectionProperties" + "type": "string", + "enum": [ + "StripNone", + "StripAll", + "StripOnly", + "StripAllExcept" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "Treatment of URL query terms when forming the cache key." } }, - "description": "VpnConnection Resource." + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "VpnConnectionProperties": { + "ForwardingConfiguration": { "type": "object", "properties": { - "remoteVpnSite": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration" + ] + }, + "backendPool": { "oneOf": [ { "$ref": "#/definitions/SubResource" @@ -17067,924 +414,1048 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site." + "description": "Reference to another subresource." }, - "routingWeight": { + "cacheConfiguration": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/CacheConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Caching settings for a caching-type route. To disable caching, do not provide a cacheConfiguration object." }, - "dpdTimeoutSeconds": { + "customForwardingPath": { + "type": "string", + "description": "A custom path used to rewrite resource paths matched by this rule. Leave empty to use incoming path." + }, + "forwardingProtocol": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The dead peer detection timeout for a vpn connection in seconds." - }, - "connectionStatus": { + "description": "Protocol this rule will use when forwarding traffic to backends." + } + }, + "required": [ + "@odata.type" + ], + "description": "Describes Forwarding Route." + }, + "FrontDoorProperties": { + "type": "object", + "properties": { + "backendPools": { "oneOf": [ { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] + "type": "array", + "items": { + "$ref": "#/definitions/BackendPool" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "Backend pools available to routing rules." }, - "vpnConnectionProtocolType": { + "backendPoolsSettings": { "oneOf": [ { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] + "$ref": "#/definitions/BackendPoolsSettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "Settings that apply to all backend pools." }, - "connectionBandwidth": { + "enabledState": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." + "description": "Operational status of the Front Door load balancer. Permitted values are 'Enabled' or 'Disabled'." }, - "sharedKey": { + "friendlyName": { "type": "string", - "description": "SharedKey for the vpn connection." + "description": "A friendly name for the frontDoor" }, - "enableBgp": { + "frontendEndpoints": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/FrontendEndpoint" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Frontend endpoints available to routing rules." }, - "usePolicyBasedTrafficSelectors": { + "healthProbeSettings": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/HealthProbeSettingsModel" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." + "description": "Health probe settings associated with this Front Door instance." }, - "ipsecPolicies": { + "loadBalancingSettings": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "$ref": "#/definitions/LoadBalancingSettingsModel" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "Load balancing settings associated with this Front Door instance." }, - "enableRateLimiting": { + "resourceState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Resource status of the Front Door." }, - "enableInternetSecurity": { + "routingRules": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/RoutingRule" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable internet security." + "description": "Routing rules associated with this Front Door." + } + }, + "description": "The JSON object that contains the properties required to create an endpoint." + }, + "frontDoors_rulesEngines_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-05-01" + ] }, - "useLocalAzureIpAddress": { + "name": { "oneOf": [ { - "type": "boolean" + "type": "string", + "pattern": "^[a-zA-Z0-9]+(-*[a-zA-Z0-9])*$", + "minLength": 1, + "maxLength": 90 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." + "description": "Name of the Rules Engine which is unique within the Front Door." }, - "vpnLinkConnections": { + "properties": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - } + "$ref": "#/definitions/RulesEngineProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site link connections to the gateway." + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." + }, + "type": { + "type": "string", + "enum": [ + "rulesEngines" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/frontDoors/rulesEngines" + }, + "FrontendEndpoint": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." }, - "routingConfiguration": { + "properties": { "oneOf": [ { - "$ref": "#/definitions/RoutingConfiguration" + "$ref": "#/definitions/FrontendEndpointProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." + "description": "The JSON object that contains the properties required to create a frontend endpoint." } }, - "description": "Parameters for VpnConnection." + "description": "A frontend endpoint used for routing." }, - "VpnGatewayProperties": { + "FrontendEndpointProperties": { "type": "object", "properties": { - "virtualHub": { + "hostName": { + "type": "string", + "description": "The host name of the frontendEndpoint. Must be a domain name." + }, + "resourceState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualHub to which the gateway belongs." + "description": "Resource status." }, - "connections": { + "sessionAffinityEnabledState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnConnection" - } + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn connections to the gateway." + "description": "Whether to allow session affinity on this host. Valid options are 'Enabled' or 'Disabled'." }, - "bgpSettings": { + "sessionAffinityTtlSeconds": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Local network gateway's BGP speaker settings." + "description": "UNUSED. This field will be ignored. The TTL to use in seconds for session affinity, if applicable." }, - "vpnGatewayScaleUnit": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The scale unit for this vpn gateway." + "description": "Defines the Web Application Firewall policy for each host (if applicable)" } }, - "description": "Parameters for VpnGateway." + "description": "The JSON object that contains the properties required to create a frontend endpoint." }, - "vpnGateways_vpnConnections_childResource": { + "FrontendEndpointUpdateParametersWebApplicationFirewallPolicyLink": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] - }, - "apiVersion": { + "id": { "type": "string", - "enum": [ - "2020-05-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." + "description": "Resource ID." } }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" + "description": "Defines the Web Application Firewall policy for each host (if applicable)" }, - "VpnLinkBgpSettings": { + "HeaderAction": { "type": "object", "properties": { - "asn": { + "headerActionType": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Append", + "Delete", + "Overwrite" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The BGP speaker's ASN." + "description": "Which type of manipulation to apply to the header." + }, + "headerName": { + "type": "string", + "description": "The name of the header this action will apply to." }, - "bgpPeeringAddress": { + "value": { "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." + "description": "The value to update the given header name with. This value is not used if the actionType is Delete." } }, - "description": "BGP settings details for a link." + "required": [ + "headerActionType", + "headerName" + ], + "description": "An action that can manipulate an http header." }, - "VpnLinkProviderProperties": { + "HealthProbeSettingsModel": { "type": "object", "properties": { - "linkProviderName": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { "type": "string", - "description": "Name of the link provider." + "description": "Resource name." }, - "linkSpeedInMbps": { + "properties": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/HealthProbeSettingsProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Link speed." - } - }, - "description": "List of properties of a link provider." - }, - "VpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." + "description": "The JSON object that contains the properties required to create a health probe settings." } }, - "description": "Properties of the Radius client root certificate of VpnServerConfiguration." + "description": "Load balancing settings for a backend pool" }, - "VpnServerConfigRadiusServerRootCertificate": { + "HealthProbeSettingsProperties": { "type": "object", "properties": { - "name": { - "type": "string", - "description": "The certificate name." + "enabledState": { + "oneOf": [ + { + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Whether to enable health probes to be made against backends defined under backendPools. Health probes can only be disabled if there is a single enabled backend in single enabled backend pool." }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of Radius Server root certificate of VpnServerConfiguration." - }, - "VpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the VpnServerConfiguration that is unique within a resource group." + "healthProbeMethod": { + "oneOf": [ + { + "type": "string", + "enum": [ + "GET", + "HEAD" + ] + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "Configures which HTTP method to use to probe the backends defined under backendPools." }, - "vpnProtocols": { + "intervalInSeconds": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN protocols for the VpnServerConfiguration." + "description": "The number of seconds between health probes." }, - "vpnAuthenticationTypes": { + "path": { + "type": "string", + "description": "The path to use for the health probe. Default is /" + }, + "protocol": { "oneOf": [ { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } + "type": "string", + "enum": [ + "Http", + "Https" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN authentication types for the VpnServerConfiguration." + "description": "Protocol scheme to use for this probe." }, - "vpnClientRootCertificates": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN client root certificate of VpnServerConfiguration." + "description": "Resource status." + } + }, + "description": "The JSON object that contains the properties required to create a health probe settings." + }, + "LoadBalancingSettingsModel": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + }, + "name": { + "type": "string", + "description": "Resource name." }, - "vpnClientRevokedCertificates": { + "properties": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - } + "$ref": "#/definitions/LoadBalancingSettingsProperties" + }, + { + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" + } + ], + "description": "The JSON object that contains the properties required to create load balancing settings" + } + }, + "description": "Load balancing settings for a backend pool" + }, + "LoadBalancingSettingsProperties": { + "type": "object", + "properties": { + "additionalLatencyMilliseconds": { + "oneOf": [ + { + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VPN client revoked certificate of VpnServerConfiguration." + "description": "The additional latency in milliseconds for probes to fall into the lowest latency bucket" }, - "radiusServerRootCertificates": { + "resourceState": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - } + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Radius Server root certificate of VpnServerConfiguration." + "description": "Resource status." }, - "radiusClientRootCertificates": { + "sampleSize": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Radius client root certificate of VpnServerConfiguration." + "description": "The number of samples to consider for load balancing decisions" }, - "vpnClientIpsecPolicies": { + "successfulSamplesRequired": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for VpnServerConfiguration." + "description": "The number of samples within the sample period that must succeed" + } + }, + "description": "The JSON object that contains the properties required to create load balancing settings" + }, + "RedirectConfiguration": { + "type": "object", + "properties": { + "@odata.type": { + "type": "string", + "enum": [ + "#Microsoft.Azure.FrontDoor.Models.FrontdoorRedirectConfiguration" + ] + }, + "customFragment": { + "type": "string", + "description": "Fragment to add to the redirect URL. Fragment is the part of the URL that comes after #. Do not include the #." + }, + "customHost": { + "type": "string", + "description": "Host to redirect. Leave empty to use the incoming host as the destination host." }, - "radiusServerAddress": { + "customPath": { "type": "string", - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection." + "description": "The full path to redirect. Path cannot be empty and must start with /. Leave empty to use the incoming path as destination path." }, - "radiusServerSecret": { + "customQueryString": { "type": "string", - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection." + "description": "The set of query strings to be placed in the redirect URL. Setting this value would replace any existing query string; leave empty to preserve the incoming query string. Query string must be in = format. The first ? and & will be added automatically so do not include them in the front, but do separate multiple query strings with &." }, - "radiusServers": { + "redirectProtocol": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } + "type": "string", + "enum": [ + "HttpOnly", + "HttpsOnly", + "MatchRequest" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Multiple Radius Server configuration for VpnServerConfiguration." + "description": "The protocol of the destination to where the traffic is redirected." }, - "aadAuthenticationParameters": { + "redirectType": { "oneOf": [ { - "$ref": "#/definitions/AadAuthenticationParameters" + "type": "string", + "enum": [ + "Moved", + "Found", + "TemporaryRedirect", + "PermanentRedirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of aad vpn authentication parameters." + "description": "The redirect type the rule will use when redirecting traffic." } }, - "description": "Parameters for VpnServerConfiguration." + "required": [ + "@odata.type" + ], + "description": "Describes Redirect Route." }, - "VpnServerConfigVpnClientRevokedCertificate": { + "RouteConfiguration": { "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." + "oneOf": [ + { + "$ref": "#/definitions/ForwardingConfiguration" }, - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." + { + "$ref": "#/definitions/RedirectConfiguration" } - }, - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration." + ], + "properties": {}, + "description": "Base class for all types of Route." }, - "VpnServerConfigVpnClientRootCertificate": { + "RoutingRule": { "type": "object", "properties": { - "name": { + "id": { "type": "string", - "description": "The certificate name." + "description": "Resource ID." }, - "publicCertData": { + "name": { "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of VPN client root certificate of VpnServerConfiguration." - }, - "VpnSiteLink": { - "type": "object", - "properties": { + "description": "Resource name." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkProperties" + "$ref": "#/definitions/RoutingRuleProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "description": "The JSON object that contains the properties required to create a routing rule." } }, - "description": "VpnSiteLink Resource." + "description": "A routing rule represents a specification for traffic to treat and where to send it, along with health probe information." }, - "VpnSiteLinkConnection": { + "RoutingRuleProperties": { "type": "object", "properties": { - "properties": { + "acceptedProtocols": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Http", + "Https" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link connection." + "description": "Protocol schemes to match for this rule" }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLinkConnection Resource." - }, - "VpnSiteLinkConnectionProperties": { - "type": "object", - "properties": { - "vpnSiteLink": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "Enabled", + "Disabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site link." + "description": "Whether to enable use of this rule. Permitted values are 'Enabled' or 'Disabled'." }, - "routingWeight": { + "frontendEndpoints": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/SubResource" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Frontend endpoints associated with this rule" }, - "connectionStatus": { + "patternsToMatch": { "oneOf": [ { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "The route patterns of the rule." }, - "vpnConnectionProtocolType": { + "resourceState": { "oneOf": [ { "type": "string", "enum": [ - "IKEv2", - "IKEv1" + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "Resource status." }, - "connectionBandwidth": { + "routeConfiguration": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/RouteConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." + "description": "Base class for all types of Route." }, - "enableBgp": { + "rulesEngine": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Reference to another subresource." }, - "usePolicyBasedTrafficSelectors": { + "webApplicationFirewallPolicyLink": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/RoutingRuleUpdateParametersWebApplicationFirewallPolicyLink" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { + "description": "Defines the Web Application Firewall policy for each routing rule (if applicable)" + } + }, + "description": "The JSON object that contains the properties required to create a routing rule." + }, + "RoutingRuleUpdateParametersWebApplicationFirewallPolicyLink": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Defines the Web Application Firewall policy for each routing rule (if applicable)" + }, + "RulesEngineAction": { + "type": "object", + "properties": { + "requestHeaderActions": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "$ref": "#/definitions/HeaderAction" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "A list of header actions to apply from the request from AFD to the origin." }, - "enableRateLimiting": { + "responseHeaderActions": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/HeaderAction" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "A list of header actions to apply from the response from AFD to the client." }, - "useLocalAzureIpAddress": { + "routeConfigurationOverride": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/RouteConfiguration" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." + "description": "Base class for all types of Route." } }, - "description": "Parameters for VpnConnection." + "description": "One or more actions that will execute, modifying the request and/or response." }, - "VpnSiteLinkProperties": { + "RulesEngineMatchCondition": { "type": "object", "properties": { - "linkProperties": { + "negateCondition": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkProviderProperties" + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The link provider properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site-link." + "description": "Describes if this is negate condition or not" }, - "fqdn": { - "type": "string", - "description": "FQDN of vpn-site-link." - }, - "bgpProperties": { + "rulesEngineMatchValue": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkBgpSettings" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." - } - }, - "description": "Parameters for VpnSite." - }, - "VpnSiteProperties": { - "type": "object", - "properties": { - "virtualWan": { + "description": "Match values to match against. The operator will apply to each value in here with OR semantics. If any of them match the variable with the given operator this match condition is considered a match." + }, + "rulesEngineMatchVariable": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "string", + "enum": [ + "IsMobile", + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestPath", + "RequestFilename", + "RequestFilenameExtension", + "RequestHeader", + "RequestBody", + "RequestScheme" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualWAN to which the vpnSite belongs." + "description": "Match Variable." }, - "deviceProperties": { + "rulesEngineOperator": { "oneOf": [ { - "$ref": "#/definitions/DeviceProperties" + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." + "description": "Describes operator to apply to the match condition." }, - "siteKey": { + "selector": { "type": "string", - "description": "The key for vpn-site that can be used for connections." - }, - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges." + "description": "Name of selector in RequestHeader or RequestBody to be matched" }, - "bgpProperties": { + "transforms": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." - }, - "isSecuritySite": { + "description": "List of transforms" + } + }, + "required": [ + "rulesEngineMatchValue", + "rulesEngineMatchVariable", + "rulesEngineOperator" + ], + "description": "Define a match condition" + }, + "RulesEngineProperties": { + "type": "object", + "properties": { + "resourceState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Creating", + "Enabling", + "Enabled", + "Disabling", + "Disabled", + "Deleting" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag." + "description": "Resource status." }, - "vpnSiteLinks": { + "rules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/VpnSiteLink" + "$ref": "#/definitions/RulesEngineRule" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site links." + "description": "A list of rules that define a particular Rules Engine Configuration." } }, - "description": "Parameters for VpnSite." + "description": "The JSON object that contains the properties required to create a Rules Engine Configuration." }, - "WebApplicationFirewallCustomRule": { + "RulesEngineRule": { "type": "object", "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." - }, - "ruleType": { + "action": { "oneOf": [ { - "type": "string", - "enum": [ - "MatchRule", - "Invalid" - ] + "$ref": "#/definitions/RulesEngineAction" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The rule type." + "description": "One or more actions that will execute, modifying the request and/or response." }, "matchConditions": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/MatchCondition" + "$ref": "#/definitions/RulesEngineMatchCondition" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of match conditions." + "description": "A list of match conditions that must meet in order for the actions of this rule to run. Having no match conditions means the actions will always run." }, - "action": { + "matchProcessingBehavior": { "oneOf": [ { "type": "string", "enum": [ - "Allow", - "Block", - "Log" + "Continue", + "Stop" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Type of Actions." - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule." - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "policySettings": { - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The PolicySettings for policy." + "description": "If this rule is a match should the rules engine continue running the remaining rules or stop. If not present, defaults to Continue." }, - "customRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The custom rules inside the policy." + "name": { + "type": "string", + "description": "A name to refer to this specific rule." }, - "managedRules": { + "priority": { "oneOf": [ { - "$ref": "#/definitions/ManagedRulesDefinition" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes the managedRules structure." + "description": "A priority assigned to this rule. " } }, "required": [ - "managedRules" + "action", + "name", + "priority" ], - "description": "Defines web application firewall policy properties." + "description": "Contains a list of match conditions, and an action on how to modify the request/response. If multiple rules match, the actions from one rule that conflict with a previous rule overwrite for a singular action, or append in the case of headers manipulation." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." } } } diff --git a/schemas/2020-06-01/Microsoft.Network.json b/schemas/2020-06-01/Microsoft.Network.json index 8cc50261c4..6d9d9fe18e 100644 --- a/schemas/2020-06-01/Microsoft.Network.json +++ b/schemas/2020-06-01/Microsoft.Network.json @@ -4,18508 +4,1193 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "privateDnsZones": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, + "etag": { + "type": "string", + "description": "The ETag of the zone." + }, "location": { "type": "string", - "description": "Resource location." + "description": "The Azure Region where the resource lives" }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the Private DNS zone (without a terminating dot)." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" + "$ref": "#/definitions/PrivateZoneProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application gateway." + "description": "Represents the properties of the Private DNS zone." }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" + "resources": { + "type": "array", + "items": { + "oneOf": [ + { + "$ref": "#/definitions/privateDnsZones_virtualNetworkLinks_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_A_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_AAAA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_CNAME_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_MX_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_PTR_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SOA_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_SRV_childResource" + }, + { + "$ref": "#/definitions/privateDnsZones_TXT_childResource" } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." + ] + } }, - "identity": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/ManagedServiceIdentity" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The identity of the application gateway, if configured." + "description": "Resource tags." }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - } + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationGateways" + "description": "Microsoft.Network/privateDnsZones" }, - "applicationGateways_privateEndpointConnections": { + "privateDnsZones_A": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application gateway private endpoint connection." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/A" + ] } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" + "description": "Microsoft.Network/privateDnsZones/A" }, - "ApplicationGatewayWebApplicationFirewallPolicies": { + "privateDnsZones_AAAA": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the web application firewall policy." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/AAAA" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" + "description": "Microsoft.Network/privateDnsZones/AAAA" }, - "applicationSecurityGroups": { + "privateDnsZones_CNAME": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application security group." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/CNAME" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationSecurityGroups" + "description": "Microsoft.Network/privateDnsZones/CNAME" }, - "azureFirewalls": { + "privateDnsZones_MX": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the azure firewall." + "description": "Represents the properties of the records in the record set." }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting where the resource needs to come from." + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/MX" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/azureFirewalls" + "description": "Microsoft.Network/privateDnsZones/MX" }, - "bastionHosts": { + "privateDnsZones_PTR": { "type": "object", "properties": { - "name": { - "type": "string", - "description": "The name of the Bastion Host." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/BastionHostPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Represents the bastion host resource." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/PTR" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/bastionHosts" + "description": "Microsoft.Network/privateDnsZones/PTR" }, - "connections": { + "privateDnsZones_SOA": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the virtual network gateway connection." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SOA" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/connections" + "description": "Microsoft.Network/privateDnsZones/SOA" }, - "customIpPrefixes": { + "privateDnsZones_SRV": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/customIpPrefixes" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Custom IP prefix properties." + "description": "Represents the properties of the records in the record set." }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/SRV" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/customIpPrefixes" + "description": "Microsoft.Network/privateDnsZones/SRV" }, - "ddosCustomPolicies": { + "privateDnsZones_TXT": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." + "description": "The ETag of the record set." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the DDoS custom policy." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/TXT" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/ddosCustomPolicies" + "description": "Microsoft.Network/privateDnsZones/TXT" }, - "ddosProtectionPlans": { + "privateDnsZones_virtualNetworkLinks": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, "location": { "type": "string", - "description": "Resource location." + "description": "The Azure Region where the resource lives" }, - "tags": { + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "$ref": "#/definitions/VirtualNetworkLinkProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Represents the properties of the Private DNS zone." }, - "properties": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the DDoS protection plan." + "description": "Resource tags." + }, + "type": { + "type": "string", + "enum": [ + "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + ] } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/ddosProtectionPlans" + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + } + }, + "definitions": { + "AaaaRecord": { + "type": "object", + "properties": { + "ipv6Address": { + "type": "string", + "description": "The IPv6 address of this AAAA record." + } + }, + "description": "An AAAA record." }, - "dscpConfigurations": { + "ARecord": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { + "ipv4Address": { "type": "string", - "enum": [ - "Microsoft.Network/dscpConfigurations" - ] - }, - "apiVersion": { + "description": "The IPv4 address of this A record." + } + }, + "description": "An A record." + }, + "CnameRecord": { + "type": "object", + "properties": { + "cname": { "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { + "description": "The canonical name for this CNAME record." + } + }, + "description": "A CNAME record." + }, + "MxRecord": { + "type": "object", + "properties": { + "exchange": { "type": "string", - "description": "Resource location." + "description": "The domain name of the mail host for this MX record." }, - "tags": { + "preference": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "The preference value for this MX record." + } + }, + "description": "An MX record." + }, + "privateDnsZones_AAAA_childResource": { + "type": "object", + "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-06-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the network interface." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "AAAA" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/dscpConfigurations" + "description": "Microsoft.Network/privateDnsZones/AAAA" }, - "expressRouteCircuits": { + "privateDnsZones_A_childResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, - "location": { + "etag": { "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "description": "The ETag of the record set." }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the express route circuit." + "description": "Represents the properties of the records in the record set." }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } + "type": { + "type": "string", + "enum": [ + "A" + ] } }, "required": [ - "name", - "type", "apiVersion", - "location", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/expressRouteCircuits" + "description": "Microsoft.Network/privateDnsZones/A" }, - "expressRouteCircuits_authorizations": { + "privateDnsZones_CNAME_childResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/AuthorizationPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the express route circuit authorization." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "CNAME" + ] } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" + "description": "Microsoft.Network/privateDnsZones/CNAME" }, - "expressRouteCircuits_peerings": { + "privateDnsZones_MX_childResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-06-01" ] }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the express route circuit peering." + "description": "Represents the properties of the records in the record set." }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } + "type": { + "type": "string", + "enum": [ + "MX" + ] } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" + "description": "Microsoft.Network/privateDnsZones/MX" }, - "expressRouteCircuits_peerings_connections": { + "privateDnsZones_PTR_childResource": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of ExpressRoutePort, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "firewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the firewall policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies" - }, - "firewallPolicies_ruleCollectionGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "IpAllocations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/IpAllocations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpAllocation." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/IpAllocations" - }, - "ipGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ipGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpGroups." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ipGroups" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_backendAddressPools": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkVirtualAppliances": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Network Virtual Appliance." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The service principal that has read access to cloud-init and config blob." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Inbound Security Rules." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateEndpoints_privateDnsZoneGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "securityPartnerProviders": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Security Partner Provider." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/securityPartnerProviders" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualHubs_bgpConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualRouters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Router." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualRouters" - }, - "virtualRouters_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnServerConfigurations" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "type": "object", - "properties": { - "aadTenant": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD tenant." - }, - "aadAudience": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD audience." - }, - "aadIssuer": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD issuer." - } - }, - "description": "AAD Vpn authentication type related parameters." - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayClientAuthConfiguration": { - "type": "object", - "properties": { - "verifyClientCertIssuerDN": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Verify client certificate issuer name on the application gateway." - } - }, - "description": "Application gateway client authentication configuration." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - }, - "privateLinkConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the application gateway private link configuration." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "sslProfile": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL profile resource of the application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "hostNames": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of Private Link Resource of an application gateway." - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private link configuration." - }, - "name": { - "type": "string", - "description": "Name of the private link configuration that is unique within an Application Gateway." - } - }, - "description": "Private Link Configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of application gateway private link ip configurations." - } - }, - "description": "Properties of private link configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of an application gateway private link ip configuration." - }, - "name": { - "type": "string", - "description": "The name of application gateway private link ip configuration." - } - }, - "description": "The application gateway private link ip configuration." - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - } - }, - "description": "Properties of an application gateway private link IP configuration." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedClientCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslProfiles": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "privateLinkConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "PrivateLink configurations on application gateway." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - }, - "forceFirewallPolicyAssociation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 20000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the request routing rule." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - }, - "urlConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url Configuration Action in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this paramter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "applicationGateways_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private endpoint connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewaySslProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL profile." - }, - "name": { - "type": "string", - "description": "Name of the SSL profile that is unique within an Application Gateway." - } - }, - "description": "SSL profile of an application gateway." - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "type": "object", - "properties": { - "trustedClientCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted client certificates." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "clientAuthConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Client authentication configuration of the application gateway resource." - } - }, - "description": "Properties of SSL profile of an application gateway." - }, - "ApplicationGatewayTrustedClientCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted client certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted client certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted client certificates of an application gateway." - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Trusted client certificates properties of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlConfiguration": { - "type": "object", - "properties": { - "modifiedPath": { - "type": "string", - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null." - }, - "modifiedQueryString": { - "type": "string", - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null." - }, - "reroute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false." - } - }, - "description": "Url configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of Application Protocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type application." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https", - "Mssql" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "managementIpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall used for management traffic." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the firewall belongs." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The firewallPolicy associated with this azure firewall." - }, - "hubIPAddresses": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP addresses associated with AzureFirewall." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure Firewall Resource SKU." - }, - "additionalProperties": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional properties used to further config this azure firewall." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallPublicIPAddress": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "Public IP Address value." - } - }, - "description": "Public IP Address associated with azure firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "AzureFirewallSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an Azure Firewall SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an Azure Firewall." - } - }, - "description": "SKU of an Azure Firewall." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "loadBalancerBackendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of backend addresses." - } - }, - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpConnectionProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the bgp connection." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - }, - "bgpPeeringAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BGP peering address with IP configuration ID for virtual network gateway." - } - }, - "description": "BGP settings details." - }, - "BreakOutCategoryPolicies": { - "type": "object", - "properties": { - "allow": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 allow category." - }, - "optimize": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 optimize category." - }, - "default": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 default category." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorEndpoint": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor endpoint." - }, - "type": { - "type": "string", - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "description": "The endpoint type." - }, - "resourceId": { - "type": "string", - "description": "Resource ID of the connection monitor endpoint." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor endpoint (IP or domain name)." - }, - "filter": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Filter for sub-items within the endpoint." - }, - "scope": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Endpoint scope." - }, - "coverageLevel": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Test coverage for the endpoint." - } - }, - "required": [ - "name" - ], - "description": "Describes the connection monitor endpoint." - }, - "ConnectionMonitorEndpointFilter": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Include" - ], - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported." - }, - "items": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items in the filter." - } - }, - "description": "Describes the connection monitor endpoint filter." - }, - "ConnectionMonitorEndpointFilterItem": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "AgentAddress" - ], - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported." - }, - "address": { - "type": "string", - "description": "The address of the filter item." - } - }, - "description": "Describes the connection monitor endpoint filter item." - }, - "ConnectionMonitorEndpointScope": { - "type": "object", - "properties": { - "include": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items which needs to be included to the endpoint scope." - }, - "exclude": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items which needs to be excluded from the endpoint scope." - } - }, - "description": "Describes the connection monitor endpoint scope." - }, - "ConnectionMonitorEndpointScopeItem": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address." - } - }, - "description": "Describes the connection monitor endpoint scope item." - }, - "ConnectionMonitorHttpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "method": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Get", - "Post" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP method to use." - }, - "path": { - "type": "string", - "description": "The path component of the URI. For instance, \"/dir1/dir2\"." - }, - "requestHeaders": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HTTPHeader" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP headers to transmit with the request." - }, - "validStatusCodeRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\"." - }, - "preferHTTPS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit." - } - }, - "description": "Describes the HTTP configuration." - }, - "ConnectionMonitorIcmpConfiguration": { - "type": "object", - "properties": { - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the ICMP configuration." - }, - "ConnectionMonitorOutput": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Workspace" - ], - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported." - }, - "workspaceSettings": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the settings for producing output into a log analytics workspace." - } - }, - "description": "Describes a connection monitor output destination." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - }, - "endpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor endpoints." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test configurations." - }, - "testGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test groups." - }, - "outputs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor outputs." - }, - "notes": { - "type": "string", - "description": "Optional notes to be associated with the connection monitor." - } - }, - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ConnectionMonitorSuccessThreshold": { - "type": "object", - "properties": { - "checksFailedPercent": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful." - }, - "roundTripTimeMs": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful." - } - }, - "description": "Describes the threshold for declaring a test successful." - }, - "ConnectionMonitorTcpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - }, - "destinationPortBehavior": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "ListenIfAvailable" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination port behavior." - } - }, - "description": "Describes the TCP configuration." - }, - "ConnectionMonitorTestConfiguration": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test configuration." - }, - "testFrequencySec": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The frequency of test evaluation, in seconds." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Http", - "Icmp" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol to use in test evaluation." - }, - "preferredIPVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters." - }, - "httpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over HTTP." - }, - "tcpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over TCP." - }, - "icmpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over ICMP." - }, - "successThreshold": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The threshold for declaring a test successful." - } - }, - "required": [ - "name", - "protocol" - ], - "description": "Describes a connection monitor test configuration." - }, - "ConnectionMonitorTestGroup": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test group." - }, - "disable": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether test group is disabled." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of test configuration names." - }, - "sources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source endpoint names." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination endpoint names." - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "description": "Describes the connection monitor test group." - }, - "ConnectionMonitorWorkspaceSettings": { - "type": "object", - "properties": { - "workspaceResourceId": { - "type": "string", - "description": "Log analytics workspace resource ID." - } - }, - "description": "Describes the settings for producing output into a log analytics workspace." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "CustomDnsConfigPropertiesFormat": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fqdn that resolves to private endpoint ip address." - }, - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of private ip addresses of the private endpoint." - } - }, - "description": "Contains custom Dns resolution configuration from customer." - }, - "CustomIpPrefixPropertiesFormat": { - "type": "object", - "properties": { - "cidr": { - "type": "string", - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length." - }, - "commissionedState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The commissioned state of the Custom IP Prefix." - } - }, - "description": "Custom IP prefix properties." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - }, - "protectedIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enables DDoS protection on the public IP." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "DnsSettings": { - "type": "object", - "properties": { - "servers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Custom DNS Servers." - }, - "enableProxy": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy." - }, - "requireProxyForNetworkRules": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "FQDNs in Network Rules are supported when set to true." - } - }, - "description": "DNS Proxy Settings in Firewall Policy." - }, - "DscpConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "markings": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of markings to be used in the configuration." - }, - "sourceIpRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosIpRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Source IP ranges." - }, - "destinationIpRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosIpRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination IP ranges." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosPortRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Sources port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosPortRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination port ranges." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "RNM supported protocol types." - } - }, - "description": "DSCP Configuration properties." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - }, - "ipv6CircuitConnectionConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IPv6 Address PrefixProperties of the express route circuit connection." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering stats of express route circuit." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Primary BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The primary BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkMacSecConfig": { - "type": "object", - "properties": { - "cknSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CKN key." - }, - "cakSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CAK key." - }, - "cipher": { - "oneOf": [ - { - "type": "string", - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Mac security cipher." - }, - "sciState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Sci mode enabled/disabled." - } - }, - "description": "ExpressRouteLink Mac Security Configuration." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - }, - "macSecConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "MacSec configuration." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "FirewallPolicyFilterRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Filter rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy Filter Rule Collection." - }, - "FirewallPolicyFilterRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction." - }, - "FirewallPolicyNatRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Nat rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy NAT Rule Collection." - }, - "FirewallPolicyNatRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "DNAT" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyNatRuleCollectionAction." - }, - "FirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "basePolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parent firewall policy from which rules are inherited." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "threatIntelWhitelist": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "DNS Proxy Settings definition." - } - }, - "description": "Firewall Policy definition." - }, - "FirewallPolicyRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/ApplicationRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NatRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NetworkRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "Name of the rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Properties of a rule." - }, - "FirewallPolicyRuleApplicationProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000." - } - }, - "description": "Properties of the application rule protocol." - }, - "FirewallPolicyRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "The name of the rule collection." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection resource." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Properties of the rule collection." - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection Group resource." - }, - "ruleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Group of Firewall Policy rule collections." - } - }, - "description": "Properties of the rule collection group." - }, - "FirewallPolicyThreatIntelWhitelist": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of IP addresses for the ThreatIntel Whitelist." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for the ThreatIntel Whitelist." - } - }, - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "FlowLogFormatParameters": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "JSON" - ], - "description": "The file type of flow log." - }, - "version": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The version (revision) of the flow log." - } - }, - "description": "Parameters that define the flow log format." - }, - "FlowLogPropertiesFormat": { - "type": "object", - "properties": { - "targetResourceId": { - "type": "string", - "description": "ID of network security group to which flow log will be applied." - }, - "storageId": { - "type": "string", - "description": "ID of the storage account which is used to store the flow log." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable flow logging." - }, - "retentionPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the retention policy for flow log." - }, - "format": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the flow log format." - }, - "flowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "description": "Parameters that define the configuration of flow log." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HTTPHeader": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name in HTTP header." - }, - "value": { - "type": "string", - "description": "The value in HTTP header." - } - }, - "description": "The HTTP header." - }, - "HubIPAddresses": { - "type": "object", - "properties": { - "publicIPs": { - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP addresses associated with azure firewall." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP Address associated with azure firewall." - } - }, - "description": "IP addresses associated with azure firewall." - }, - "HubIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of IP configuration." - }, - "HubPublicIPAddresses": { - "type": "object", - "properties": { - "addresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained." - }, - "count": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of Public IP addresses associated with azure firewall." - } - }, - "description": "Public IP addresses associated with azure firewall." - }, - "HubRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route." - }, - "destinationType": { - "type": "string", - "description": "The type of destinations (eg: CIDR, ResourceId, Service)." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hop (eg: ResourceId)." - }, - "nextHop": { - "type": "string", - "description": "NextHop resource ID." - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "description": "RouteTable route." - }, - "HubRouteTableProperties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of labels associated with this route table." - } - }, - "description": "Parameters for RouteTable." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "InboundSecurityRuleProperties": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundSecurityRules" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of allowed rules." - } - }, - "description": "Properties of the Inbound Security Rules resource." - }, - "InboundSecurityRules": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol. This should be either TCP or UDP." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed." - }, - "destinationPortRange": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NVA port ranges to be opened up. One needs to provide specific ports." - } - }, - "description": "Properties of the Inbound Security Rules resource." - }, - "IpAllocationPropertiesFormat": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Undefined", - "Hypernet" - ], - "description": "The type for the IpAllocation." - }, - "prefix": { - "type": "string", - "description": "The address prefix for the IpAllocation." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix length for the IpAllocation." - }, - "prefixType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix Type for the IpAllocation." - }, - "ipamAllocationId": { - "type": "string", - "description": "The IPAM allocation ID." - }, - "allocationTags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAllocation tags." - } - }, - "description": "Properties of the IpAllocation." - }, - "IPConfigurationBgpPeeringAddress": { - "type": "object", - "properties": { - "ipconfigurationId": { - "type": "string", - "description": "The ID of IP configuration which belongs to gateway." - }, - "customBgpIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of custom BGP peering addresses which belong to IP configuration." - } - }, - "description": "Properties of IPConfigurationBgpPeeringAddress." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpGroupPropertiesFormat": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource." - } - }, - "description": "The IpGroups property information." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "The IP tag type. Example: FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "The value of the IP tag associated with the public IP. Example: SQL." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6CircuitConnectionConfig": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "/125 IP address space to carve out customer addresses for global reach." - } - }, - "description": "IPv6 Circuit Connection properties for global reach." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerBackendAddress": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address." - } - }, - "description": "Load balancer backend addresses." - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to an existing virtual network." - }, - "ipAddress": { - "type": "string", - "description": "IP Address belonging to the referenced virtual network." - } - }, - "description": "Properties of the load balancer backend addresses." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_backendAddressPools_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "fqdn": { - "type": "string", - "description": "FQDN of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedRuleGroupOverride": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The managed rule group to override." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRuleOverride": { - "type": "object", - "properties": { - "ruleId": { - "type": "string", - "description": "Identifier for the managed rule." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the managed rule. Defaults to Disabled if not specified." - } - }, - "required": [ - "ruleId" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRulesDefinition": { - "type": "object", - "properties": { - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Exclusions that are applied on the policy." - }, - "managedRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The managed rule sets that are associated with the policy." - } - }, - "required": [ - "managedRuleSets" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ManagedRuleSet": { - "type": "object", - "properties": { - "ruleSetType": { - "type": "string", - "description": "Defines the rule set type to use." - }, - "ruleSetVersion": { - "type": "string", - "description": "Defines the version of the rule set to use." - }, - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the rule group overrides to apply to the rule set." - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "description": "Defines a managed rule set." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "The selector of match variable." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NatRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type nat." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type network." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "type": "object", - "properties": { - "nvaSku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network Virtual Appliance SKU." - }, - "bootStrapConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BootStrapConfigurationBlobs storage URLs." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where Network Virtual Appliance is being deployed." - }, - "cloudInitConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "CloudInitConfigurationBlob storage URLs." - }, - "cloudInitConfiguration": { - "type": "string", - "description": "CloudInitConfiguration string in plain text." - }, - "virtualApplianceAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualAppliance ASN." - } - }, - "description": "Network Virtual Appliance definition." - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundSecurityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Inbound Security Rules." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "O365BreakOutCategoryPolicies": { - "type": "object", - "properties": { - "allow": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control allow category." - }, - "optimize": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control optimize category." - }, - "default": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control default category." - } - }, - "description": "Office365 breakout categories." - }, - "O365PolicyProperties": { - "type": "object", - "properties": { - "breakOutCategories": { - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office365 breakout categories." - } - }, - "description": "The Office365 breakout policy." - }, - "Office365PolicyProperties": { - "type": "object", - "properties": { - "breakOutCategories": { - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 breakout categories." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "OwaspCrsExclusionEntry": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "P2SConnectionConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2S connection configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SConnectionConfiguration Resource." - }, - "P2SConnectionConfigurationProperties": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not." - } - }, - "description": "Parameters for P2SConnectionConfiguration." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "p2SConnectionConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all p2s connection configurations of the gateway." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "vpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "customDnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all customer specified DNS servers IP addresses." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "The storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the policy." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The mode of the policy." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow WAF to check request Body." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateDnsZoneConfig": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone configuration." - } - }, - "description": "PrivateDnsZoneConfig resource." - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of private dns zone configurations of the private dns zone group." - } - }, - "description": "Properties of the private dns zone group." - }, - "PrivateDnsZonePropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneId": { - "type": "string", - "description": "The resource id of the private dns zone." - } - }, - "description": "Properties of the private dns zone configuration resource." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - }, - "customDnsConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of custom dns configurations." - } - }, - "description": "Properties of the private endpoint." - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionsRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of private link service IP configurations." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - }, - "enableProxyProtocol": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the private link service is enabled for proxy protocol or not." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "PropagatedRouteTable": { - "type": "object", - "properties": { - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of labels." - }, - "ids": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of resource ids of all the RouteTables." - } - }, - "description": "The list of RouteTables to advertise the routes to." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddress": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "location" - ], - "description": "Public IP address resource." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - }, - "customIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customIpPrefix that this prefix is associated with." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "QosIpRange": { - "type": "object", - "properties": { - "startIP": { - "type": "string", - "description": "Start IP Address." - }, - "endIP": { - "type": "string", - "description": "End IP Address." - } - }, - "description": "Qos Traffic Profiler IP Range properties." - }, - "QosPortRange": { - "type": "object", - "properties": { - "start": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Qos Port Range start." - }, - "end": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Qos Port Range end." - } - }, - "description": "Qos Traffic Profiler Port range properties." - }, - "RadiusServer": { - "type": "object", - "properties": { - "radiusServerAddress": { - "type": "string", - "description": "The address of this radius server." - }, - "radiusServerScore": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The initial score assigned to this radius server." - }, - "radiusServerSecret": { - "type": "string", - "description": "The secret used for this radius server." - } - }, - "required": [ - "radiusServerAddress" - ], - "description": "Radius Server Settings." - }, - "RetentionPolicyParameters": { - "type": "object", - "properties": { - "days": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days to retain flow log records." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable retention." - } - }, - "description": "Parameters that define the retention policy for flow log." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "RoutingConfiguration": { - "type": "object", - "properties": { - "associatedRouteTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The resource id RouteTable associated with this RoutingConfiguration." - }, - "propagatedRouteTables": { - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of RouteTables to advertise the routes to." - }, - "vnetRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - } - }, - "description": "Routing Configuration indicating the associated and propagated route tables for this connection." - }, - "SecurityPartnerProviderPropertiesFormat": { - "type": "object", - "properties": { - "securityProviderName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The security provider name." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the Security Partner Provider belongs." - } - }, - "description": "Properties of the Security Partner Provider." - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "StaticRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the StaticRoute that is unique within a VnetRoute." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all address prefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The ip address of the next hop." - } - }, - "description": "List of all Static Routes." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this subnet." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private end point in the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private link service in the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "TrafficAnalyticsConfigurationProperties": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable traffic analytics." - }, - "workspaceId": { - "type": "string", - "description": "The resource guid of the attached workspace." - }, - "workspaceRegion": { - "type": "string", - "description": "The location of the attached workspace." - }, - "workspaceResourceId": { - "type": "string", - "description": "Resource Id of the attached workspace." - }, - "trafficAnalyticsInterval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficAnalyticsProperties": { - "type": "object", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficSelectorPolicy": { - "type": "object", - "properties": { - "localAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of local address spaces in CIDR format." - }, - "remoteAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of remote address spaces in CIDR format." - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "description": "An traffic selector policy for a virtual network gateway connection." - }, - "VirtualApplianceSiteProperties": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "Address Prefix." - }, - "o365Policy": { - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 Policy." - } - }, - "description": "Properties of the rule group." - }, - "VirtualApplianceSkuProperties": { - "type": "object", - "properties": { - "vendor": { - "type": "string", - "description": "Virtual Appliance Vendor." - }, - "bundledScaleUnit": { - "type": "string", - "description": "Virtual Appliance Scale Unit." - }, - "marketPlaceVersion": { - "type": "string", - "description": "Virtual Appliance Version." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "azureFirewall": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The azureFirewall associated with this VirtualHub." - }, - "securityPartnerProvider": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The securityPartnerProvider associated with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "virtualHubRouteTableV2s": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all virtual hub route table v2s associated with this VirtualHub." - }, - "sku": { - "type": "string", - "description": "The sku of this VirtualHub." - }, - "routingState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Provisioned", - "Provisioning", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing state." - }, - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - }, - "enableVirtualRouterRoutePropogation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control route propogation for VirtualRouter hub." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualHubRouteTableV2": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VirtualHubRouteTableV2 Resource." - }, - "VirtualHubRouteTableV2Properties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "attachedConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all connections attached to this route table v2." - } - }, - "description": "Parameters for VirtualHubRouteTableV2." - }, - "VirtualHubRouteV2": { - "type": "object", - "properties": { - "destinationType": { - "type": "string", - "description": "The type of destinations." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hops." - }, - "nextHops": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NextHops ip address." - } - }, - "description": "VirtualHubRouteTableV2 route." - }, - "virtualHubs_bgpConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "VirtualNetworkBgpCommunities": { - "type": "object", - "properties": { - "virtualNetworkCommunity": { - "type": "string", - "description": "The BGP community associated with the virtual network." - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dead peer detection timeout of this connection in seconds." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use private local Azure IP for the connection." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnGatewayGeneration": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Generation1", - "Generation2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "enablePrivateIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether private IP needs to be enabled on this gateway for connections or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." - }, - "gatewayDefaultSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." - }, - "vpnClientConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - }, - "enableDnsForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether dns forwarding is enabled or not." - } - }, - "description": "VirtualNetworkGateway properties." - }, - "VirtualNetworkGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU name." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU tier." - } - }, - "description": "VirtualNetworkGatewaySku details." - }, - "VirtualNetworkPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." - }, - "useRemoteGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." - }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network address space." - }, - "remoteBgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network's Bgp Communities." - }, - "peeringState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The status of the virtual network peering." - } - }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." - }, - "VirtualNetworkPropertiesFormat": { - "type": "object", - "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." - }, - "subnets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of subnets in a Virtual Network." - }, - "virtualNetworkPeerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of peerings in a Virtual Network." - }, - "enableDdosProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." - }, - "enableVmProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." - }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." - }, - "bgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this VNET." - } - }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." - }, - "destinationLoadBalancerFrontEndIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." - }, - "destinationPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VXLAN destination port that will receive the tapped traffic." - } - }, - "description": "Virtual Network Tap properties." - }, - "VirtualRouterPeeringProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the rule group." - }, - "VirtualRouterPropertiesFormat": { - "type": "object", - "properties": { - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - }, - "hostedSubnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Subnet on which VirtualRouter is hosted." - }, - "hostedGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Gateway on which VirtualRouter is hosted." - } - }, - "description": "Virtual Router definition." - }, - "virtualRouters_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "VirtualWanProperties": { - "type": "object", - "properties": { - "disableVpnEncryption": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Vpn encryption to be disabled or not." - }, - "allowBranchToBranchTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if branch to branch traffic is allowed." - }, - "allowVnetToVnetTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if Vnet to Vnet traffic is allowed." - }, - "office365LocalBreakoutCategory": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The office local breakout category." - }, - "type": { - "type": "string", - "description": "The type of the VirtualWAN." - } - }, - "description": "Parameters for VirtualWAN." - }, - "VnetRoute": { - "type": "object", - "properties": { - "staticRoutes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/StaticRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all Static Routes." - } - }, - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - }, - "VpnClientConfiguration": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRootCertificate for virtual network gateway." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." - }, - "vpnClientProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientProtocols for Virtual network gateway." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServers": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The radiusServers property for multiple radius server configuration." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - } - }, - "description": "VpnClientConfiguration for P2S client." - }, - "VpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VPN client revoked certificate of virtual network gateway." - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway." - }, - "VpnConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnConnection Resource." - }, - "VpnConnectionProperties": { - "type": "object", - "properties": { - "remoteVpnSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Id of the connected vpn site." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing weight for vpn connection." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "DPD timeout in seconds for vpn connection." - }, - "connectionStatus": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The connection status." - }, - "vpnConnectionProtocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "enableRateLimiting": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use local azure ip to initiate connection." - }, - "vpnLinkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn site link connections to the gateway." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "connections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn connections to the gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this vpn gateway." - } - }, - "description": "Parameters for VpnGateway." - }, - "vpnGateways_vpnConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] - }, "apiVersion": { "type": "string", - "enum": [ - "2020-06-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "VpnLinkBgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - } - }, - "description": "BGP settings details for a link." - }, - "VpnLinkProviderProperties": { - "type": "object", - "properties": { - "linkProviderName": { - "type": "string", - "description": "Name of the link provider." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of a link provider." - }, - "VpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." - } - }, - "description": "Properties of the Radius client root certificate of VpnServerConfiguration." - }, - "VpnServerConfigRadiusServerRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of Radius Server root certificate of VpnServerConfiguration." - }, - "VpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the VpnServerConfiguration that is unique within a resource group." - }, - "vpnProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN protocols for the VpnServerConfiguration." - }, - "vpnAuthenticationTypes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN authentication types for the VpnServerConfiguration." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client root certificate of VpnServerConfiguration." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client revoked certificate of VpnServerConfiguration." - }, - "radiusServerRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius Server root certificate of VpnServerConfiguration." - }, - "radiusClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius client root certificate of VpnServerConfiguration." + "enum": [ + "2020-06-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, - "vpnClientIpsecPolicies": { + "properties": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "VpnClientIpsecPolicies for VpnServerConfiguration." + "description": "Represents the properties of the records in the record set." }, - "radiusServerAddress": { + "type": { + "type": "string", + "enum": [ + "PTR" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/PTR" + }, + "privateDnsZones_SOA_childResource": { + "type": "object", + "properties": { + "apiVersion": { "type": "string", - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection." + "enum": [ + "2020-06-01" + ] }, - "radiusServerSecret": { + "etag": { "type": "string", - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection." + "description": "The ETag of the record set." }, - "radiusServers": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Multiple Radius Server configuration for VpnServerConfiguration." + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." }, - "aadAuthenticationParameters": { + "properties": { "oneOf": [ { - "$ref": "#/definitions/AadAuthenticationParameters" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of aad vpn authentication parameters." + "description": "Represents the properties of the records in the record set." + }, + "type": { + "type": "string", + "enum": [ + "SOA" + ] } }, - "description": "Parameters for VpnServerConfiguration." + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SOA" }, - "VpnServerConfigVpnClientRevokedCertificate": { + "privateDnsZones_SRV_childResource": { "type": "object", "properties": { - "name": { + "apiVersion": { "type": "string", - "description": "The certificate name." + "enum": [ + "2020-06-01" + ] }, - "thumbprint": { + "etag": { "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration." - }, - "VpnServerConfigVpnClientRootCertificate": { - "type": "object", - "properties": { + "description": "The ETag of the record set." + }, "name": { "type": "string", - "description": "The certificate name." + "description": "The name of the record set, relative to the name of the zone." }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of VPN client root certificate of VpnServerConfiguration." - }, - "VpnSiteLink": { - "type": "object", - "properties": { "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkProperties" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link." + "description": "Represents the properties of the records in the record set." }, - "name": { + "type": { "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "enum": [ + "SRV" + ] } }, - "description": "VpnSiteLink Resource." + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/SRV" }, - "VpnSiteLinkConnection": { + "privateDnsZones_TXT_childResource": { "type": "object", "properties": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-06-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the record set." + }, + "name": { + "type": "string", + "description": "The name of the record set, relative to the name of the zone." + }, "properties": { "oneOf": [ { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" + "$ref": "#/definitions/RecordSetProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the VPN site link connection." + "description": "Represents the properties of the records in the record set." }, - "name": { + "type": { "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." + "enum": [ + "TXT" + ] } }, - "description": "VpnSiteLinkConnection Resource." + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/TXT" }, - "VpnSiteLinkConnectionProperties": { + "privateDnsZones_virtualNetworkLinks_childResource": { "type": "object", "properties": { - "vpnSiteLink": { + "apiVersion": { + "type": "string", + "enum": [ + "2020-06-01" + ] + }, + "etag": { + "type": "string", + "description": "The ETag of the virtual network link." + }, + "location": { + "type": "string", + "description": "The Azure Region where the resource lives" + }, + "name": { + "type": "string", + "description": "The name of the virtual network link." + }, + "properties": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/VirtualNetworkLinkProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Id of the connected vpn site link." + "description": "Represents the properties of the Private DNS zone." }, - "routingWeight": { + "tags": { "oneOf": [ { - "type": "integer" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Routing weight for vpn connection." + "description": "Resource tags." }, - "connectionStatus": { + "type": { + "type": "string", + "enum": [ + "virtualNetworkLinks" + ] + } + }, + "required": [ + "apiVersion", + "name", + "properties", + "type" + ], + "description": "Microsoft.Network/privateDnsZones/virtualNetworkLinks" + }, + "PrivateZoneProperties": { + "type": "object", + "properties": {}, + "description": "Represents the properties of the Private DNS zone." + }, + "PtrRecord": { + "type": "object", + "properties": { + "ptrdname": { + "type": "string", + "description": "The PTR target domain name for this PTR record." + } + }, + "description": "A PTR record." + }, + "RecordSetProperties": { + "type": "object", + "properties": { + "aaaaRecords": { "oneOf": [ { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] + "type": "array", + "items": { + "$ref": "#/definitions/AaaaRecord" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "The list of AAAA records in the record set." }, - "vpnConnectionProtocolType": { + "aRecords": { "oneOf": [ { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] + "type": "array", + "items": { + "$ref": "#/definitions/ARecord" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." + "description": "The list of A records in the record set." }, - "connectionBandwidth": { + "cnameRecord": { "oneOf": [ { - "type": "integer" + "$ref": "#/definitions/CnameRecord" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." + "description": "A CNAME record." }, - "enableBgp": { + "metadata": { "oneOf": [ { - "type": "boolean" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "The metadata attached to the record set." }, - "usePolicyBasedTrafficSelectors": { + "mxRecords": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/MxRecord" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." + "description": "The list of MX records in the record set." }, - "ipsecPolicies": { + "ptrRecords": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/IpsecPolicy" + "$ref": "#/definitions/PtrRecord" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "The list of PTR records in the record set." }, - "enableRateLimiting": { + "soaRecord": { "oneOf": [ { - "type": "boolean" + "$ref": "#/definitions/SoaRecord" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "An SOA record." }, - "useLocalAzureIpAddress": { + "srvRecords": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/SrvRecord" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnSiteLinkProperties": { - "type": "object", - "properties": { - "linkProperties": { + "description": "The list of SRV records in the record set." + }, + "ttl": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkProviderProperties" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The link provider properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site-link." - }, - "fqdn": { - "type": "string", - "description": "FQDN of vpn-site-link." + "description": "The TTL (time-to-live) of the records in the record set." }, - "bgpProperties": { + "txtRecords": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkBgpSettings" + "type": "array", + "items": { + "$ref": "#/definitions/TxtRecord" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "The list of TXT records in the record set." } }, - "description": "Parameters for VpnSite." + "description": "Represents the properties of the records in the record set." }, - "VpnSiteProperties": { + "SoaRecord": { "type": "object", "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the vpnSite belongs." + "email": { + "type": "string", + "description": "The email contact for this SOA record." }, - "deviceProperties": { + "expireTime": { "oneOf": [ { - "$ref": "#/definitions/DeviceProperties" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." + "description": "The expire time for this SOA record." }, - "siteKey": { + "host": { "type": "string", - "description": "The key for vpn-site that can be used for connections." - }, - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges." + "description": "The domain name of the authoritative name server for this SOA record." }, - "bgpProperties": { + "minimumTtl": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "The minimum value for this SOA record. By convention this is used to determine the negative caching duration." }, - "isSecuritySite": { + "refreshTime": { "oneOf": [ { - "type": "boolean" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag." + "description": "The refresh value for this SOA record." }, - "vpnSiteLinks": { + "retryTime": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLink" - } + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site links." + "description": "The retry time for this SOA record." }, - "o365Policy": { + "serialNumber": { "oneOf": [ { - "$ref": "#/definitions/O365PolicyProperties" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Office365 Policy." + "description": "The serial number for this SOA record." } }, - "description": "Parameters for VpnSite." + "description": "An SOA record." }, - "WebApplicationFirewallCustomRule": { + "SrvRecord": { "type": "object", "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource." - }, - "priority": { + "port": { "oneOf": [ { "type": "integer" @@ -18514,106 +1199,94 @@ "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + "description": "The port value for this SRV record." }, - "ruleType": { + "priority": { "oneOf": [ { - "type": "string", - "enum": [ - "MatchRule", - "Invalid" - ] + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The rule type." + "description": "The priority value for this SRV record." }, - "matchConditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match conditions." + "target": { + "type": "string", + "description": "The target domain name for this SRV record." }, - "action": { + "weight": { "oneOf": [ { - "type": "string", - "enum": [ - "Allow", - "Block", - "Log" - ] + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Type of Actions." + "description": "The weight value for this SRV record." } }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule." + "description": "An SRV record." + }, + "SubResource": { + "type": "object", + "properties": { + "id": { + "type": "string", + "description": "Resource ID." + } + }, + "description": "Reference to another subresource." }, - "WebApplicationFirewallPolicyPropertiesFormat": { + "TxtRecord": { "type": "object", "properties": { - "policySettings": { + "value": { "oneOf": [ { - "$ref": "#/definitions/PolicySettings" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The PolicySettings for policy." - }, - "customRules": { + "description": "The text value of this TXT record." + } + }, + "description": "A TXT record." + }, + "VirtualNetworkLinkProperties": { + "type": "object", + "properties": { + "registrationEnabled": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The custom rules inside the policy." + "description": "Is auto-registration of virtual machine records in the virtual network in the Private DNS zone enabled?" }, - "managedRules": { + "virtualNetwork": { "oneOf": [ { - "$ref": "#/definitions/ManagedRulesDefinition" + "$ref": "#/definitions/SubResource" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes the managedRules structure." + "description": "Reference to another subresource." } }, - "required": [ - "managedRules" - ], - "description": "Defines web application firewall policy properties." + "description": "Represents the properties of the Private DNS zone." } } } diff --git a/schemas/2020-11-01/Microsoft.Network.json b/schemas/2020-11-01/Microsoft.Network.json index 16bd8728a1..cd295ae08d 100644 --- a/schemas/2020-11-01/Microsoft.Network.json +++ b/schemas/2020-11-01/Microsoft.Network.json @@ -4,19626 +4,694 @@ "title": "Microsoft.Network", "description": "Microsoft Network Resource Types", "resourceDefinitions": { - "applicationGateways": { + "FrontDoorWebApplicationFirewallPolicies": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationGateways" - ] - }, "apiVersion": { "type": "string", "enum": [ "2020-11-01" ] }, + "etag": { + "type": "string", + "description": "Gets a unique read-only string that changes whenever the resource is updated." + }, "location": { "type": "string", "description": "Resource location." }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "name": { + "type": "string", + "maxLength": 128, + "description": "The name of the Web Application Firewall Policy." }, "properties": { "oneOf": [ { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" + "$ref": "#/definitions/WebApplicationFirewallPolicyProperties" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the application gateway." + "description": "Defines web application firewall policy properties." }, - "zones": { + "sku": { "oneOf": [ { - "type": "array", - "items": { - "type": "string" - } + "$ref": "#/definitions/Sku" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of availability zones denoting where the resource needs to come from." + "description": "The pricing tier of the web application firewall policy." }, - "identity": { + "tags": { "oneOf": [ { - "$ref": "#/definitions/ManagedServiceIdentity" + "type": "object", + "additionalProperties": { + "type": "string" + }, + "properties": {} }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The identity of the application gateway, if configured." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationGateways" - }, - "applicationGateways_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" + "description": "Resource tags." }, "type": { "type": "string", "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" + "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private endpoint connection." } }, "required": [ - "name", - "type", "apiVersion", - "properties" + "name", + "properties", + "type" ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" - }, - "ApplicationGatewayWebApplicationFirewallPolicies": { + "description": "Microsoft.Network/FrontDoorWebApplicationFirewallPolicies" + } + }, + "definitions": { + "CustomRule": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { + "action": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Describes what action to be applied when rule matches." }, - "properties": { + "enabledState": { "oneOf": [ { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the web application firewall policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - }, - "applicationSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." + "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified." }, - "tags": { + "matchConditions": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" + "type": "array", + "items": { + "$ref": "#/definitions/MatchCondition" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "List of match conditions." }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application security group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/applicationSecurityGroups" - }, - "azureFirewalls": { - "type": "object", - "properties": { "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/azureFirewalls" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." + "maxLength": 128, + "description": "Describes the name of the rule." }, - "properties": { + "priority": { "oneOf": [ { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Properties of the azure firewall." + "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." }, - "zones": { + "rateLimitDurationInMinutes": { "oneOf": [ { - "type": "array", - "items": { - "type": "string" - } + "type": "integer", + "minimum": 0, + "maximum": 5 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "A list of availability zones denoting where the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/azureFirewalls" - }, - "bastionHosts": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Bastion Host." - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/bastionHosts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." + "description": "Time window for resetting the rate limit count. Default is 1 minute." }, - "tags": { + "rateLimitThreshold": { "oneOf": [ { - "type": "object", - "additionalProperties": { - "type": "string" - } + "type": "integer", + "minimum": 0 }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Resource tags." + "description": "Number of allowed requests per client within the time window." }, - "properties": { + "ruleType": { "oneOf": [ { - "$ref": "#/definitions/BastionHostPropertiesFormat" + "type": "string", + "enum": [ + "MatchRule", + "RateLimitRule" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Represents the bastion host resource." + "description": "Describes type of rule." } }, "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" + "action", + "matchConditions", + "priority", + "ruleType" ], - "description": "Microsoft.Network/bastionHosts" + "description": "Defines contents of a web application rule" }, - "connections": { + "CustomRuleList": { "type": "object", "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/connections" - }, - "customIpPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/customIpPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the custom IP prefix." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/customIpPrefixes" - }, - "ddosCustomPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS custom policy." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ddosCustomPolicies" - }, - "ddosProtectionPlans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the DDoS protection plan." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/ddosProtectionPlans" - }, - "dscpConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/dscpConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/dscpConfigurations" - }, - "expressRouteCircuits": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits" - }, - "expressRouteCircuits_authorizations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "expressRouteCrossConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections" - }, - "expressRouteCrossConnections_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "expressRouteGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways" - }, - "expressRouteGateways_expressRouteConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRoutePorts": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRoutePort properties." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of ExpressRoutePort, if configured." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ExpressRoutePorts" - }, - "firewallPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the firewall policy." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The identity of the firewall policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies" - }, - "firewallPolicies_ruleCollectionGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "IpAllocations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/IpAllocations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpAllocation." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/IpAllocations" - }, - "ipGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/ipGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IpGroups." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/ipGroups" - }, - "loadBalancers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the load balancer." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load balancer SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/loadBalancers" - }, - "loadBalancers_backendAddressPools": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "localNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/localNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the local network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/localNetworkGateways" - }, - "natGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/natGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The nat gateway SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat Gateway properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/natGateways" - }, - "networkInterfaces": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the network interface." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network interface." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces" - }, - "networkInterfaces_tapConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "networkProfiles": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkProfiles" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network profile properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkProfiles" - }, - "networkSecurityGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network security group." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups" - }, - "networkSecurityGroups_securityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "networkVirtualAppliances": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Network Virtual Appliance." - }, - "identity": { - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The service principal that has read access to cloud-init and config blob." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Inbound Security Rules." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "networkWatchers": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the network watcher." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers" - }, - "networkWatchers_connectionMonitors": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "p2svpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/p2svpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnGateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/p2svpnGateways" - }, - "privateEndpoints": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the load balancer." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private endpoint." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints" - }, - "privateEndpoints_privateDnsZoneGroups": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "privateLinkServices": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the load balancer." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices" - }, - "privateLinkServices_privateEndpointConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "publicIPAddresses": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPAddresses" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the public ip address." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPAddresses" - }, - "publicIPPrefixes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the public ip address." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP prefix SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP prefix properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/publicIPPrefixes" - }, - "routeFilters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeFilters" - }, - "routeFilters_routeFilterRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route table." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/routeTables" - }, - "routeTables_routes": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/routeTables/routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "securityPartnerProviders": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Security Partner Provider." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/securityPartnerProviders" - }, - "serviceEndpointPolicies": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service end point policy." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "virtualHubs": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualHubs" - }, - "virtualHubs_bgpConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "virtualNetworkGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkGateways" - }, - "virtualNetworks": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the virtual network." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks" - }, - "virtualNetworks_subnets": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "virtualNetworkTaps": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual Network Tap Properties." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualNetworkTaps" - }, - "virtualRouters": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Router." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualRouters" - }, - "virtualRouters_peerings": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "virtualWans": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/virtualWans" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual WAN." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/virtualWans" - }, - "vpnGateways": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN gateway." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnGateways" - }, - "vpnGateways_natRules": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VpnGateway NAT rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/natRules" - }, - "vpnGateways_vpnConnections": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "vpnServerConfigurations": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2SVpnServer configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnServerConfigurations" - }, - "vpnSites": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "Microsoft.Network/vpnSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/vpnSites" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "type": "object", - "properties": { - "aadTenant": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD tenant." - }, - "aadAudience": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD audience." - }, - "aadIssuer": { - "type": "string", - "description": "AAD Vpn authentication parameter AAD issuer." - } - }, - "description": "AAD Vpn authentication type related parameters." - }, - "AddressSpace": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of address blocks reserved for this virtual network in CIDR notation." - } - }, - "required": [ - "addressPrefixes" - ], - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network." - }, - "ApplicationGatewayAuthenticationCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway authentication certificate." - }, - "name": { - "type": "string", - "description": "Name of the authentication certificate that is unique within an Application Gateway." - } - }, - "description": "Authentication certificates of an application gateway." - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Authentication certificates properties of an application gateway." - }, - "ApplicationGatewayAutoscaleConfiguration": { - "type": "object", - "properties": { - "minCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Lower bound on number of Application Gateway capacity." - }, - "maxCapacity": { - "oneOf": [ - { - "type": "integer", - "minimum": 2 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Upper bound on number of Application Gateway capacity." - } - }, - "required": [ - "minCapacity" - ], - "description": "Application Gateway autoscale configuration." - }, - "ApplicationGatewayBackendAddress": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fully qualified domain name (FQDN)." - }, - "ipAddress": { - "type": "string", - "description": "IP address." - } - }, - "description": "Backend address of an application gateway." - }, - "ApplicationGatewayBackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address pool that is unique within an Application Gateway." - } - }, - "description": "Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "backendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend addresses." - } - }, - "description": "Properties of Backend Address Pool of an application gateway." - }, - "ApplicationGatewayBackendHttpSettings": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway backend HTTP settings." - }, - "name": { - "type": "string", - "description": "Name of the backend http settings that is unique within an Application Gateway." - } - }, - "description": "Backend address pool settings of an application gateway." - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port on the backend." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used to communicate with the backend." - }, - "cookieBasedAffinity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Cookie based affinity." - }, - "requestTimeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probe resource of an application gateway." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway authentication certificates." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted root certificates." - }, - "connectionDraining": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection draining of the backend http settings resource." - }, - "hostName": { - "type": "string", - "description": "Host header to be sent to the backend servers." - }, - "pickHostNameFromBackendAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false." - }, - "affinityCookieName": { - "type": "string", - "description": "Cookie name to use for the affinity cookie." - }, - "probeEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the probe is enabled. Default value is false." - }, - "path": { - "type": "string", - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null." - } - }, - "description": "Properties of Backend address pool settings of an application gateway." - }, - "ApplicationGatewayClientAuthConfiguration": { - "type": "object", - "properties": { - "verifyClientCertIssuerDN": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Verify client certificate issuer name on the application gateway." - } - }, - "description": "Application gateway client authentication configuration." - }, - "ApplicationGatewayConnectionDraining": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether connection draining is enabled or not." - }, - "drainTimeoutInSec": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 3600 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds." - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration." - }, - "ApplicationGatewayCustomError": { - "type": "object", - "properties": { - "statusCode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "HttpStatus403", - "HttpStatus502" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Status code of the application gateway customer error." - }, - "customErrorPageUrl": { - "type": "string", - "description": "Error page URL of the application gateway customer error." - } - }, - "description": "Customer error of an application gateway." - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The name of the rule group that will be disabled." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Allows to disable rules within a rule group or an entire rule group." - }, - "ApplicationGatewayFirewallExclusion": { - "type": "object", - "properties": { - "matchVariable": { - "type": "string", - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "type": "string", - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ApplicationGatewayFrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the frontend IP configuration that is unique within an Application Gateway." - } - }, - "description": "Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "PrivateIPAddress of the network interface IP Configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource." - }, - "privateLinkConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the application gateway private link configuration." - } - }, - "description": "Properties of Frontend IP configuration of an application gateway." - }, - "ApplicationGatewayFrontendPort": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway frontend port." - }, - "name": { - "type": "string", - "description": "Name of the frontend port that is unique within an Application Gateway." - } - }, - "description": "Frontend port of an application gateway." - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port." - } - }, - "description": "Properties of Frontend port of an application gateway." - }, - "ApplicationGatewayHeaderConfiguration": { - "type": "object", - "properties": { - "headerName": { - "type": "string", - "description": "Header name of the header configuration." - }, - "headerValue": { - "type": "string", - "description": "Header value of the header configuration." - } - }, - "description": "Header configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayHttpListener": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway HTTP listener." - }, - "name": { - "type": "string", - "description": "Name of the HTTP listener that is unique within an Application Gateway." - } - }, - "description": "Http listener of an application gateway." - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP configuration resource of an application gateway." - }, - "frontendPort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend port resource of an application gateway." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol of the HTTP listener." - }, - "hostName": { - "type": "string", - "description": "Host name of HTTP listener." - }, - "sslCertificate": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificate resource of an application gateway." - }, - "sslProfile": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL profile resource of the application gateway." - }, - "requireServerNameIndication": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the HTTP listener." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "hostNames": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well." - } - }, - "description": "Properties of HTTP listener of an application gateway." - }, - "ApplicationGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the IP configuration that is unique within an Application Gateway." - } - }, - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed." - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address." - } - }, - "description": "Properties of IP configuration of an application gateway." - }, - "ApplicationGatewayPathRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway path rule." - }, - "name": { - "type": "string", - "description": "Name of the path rule that is unique within an Application Gateway." - } - }, - "description": "Path rule of URL path map of an application gateway." - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "type": "object", - "properties": { - "paths": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules of URL path map." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of URL path map path rule." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of URL path map path rule." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of URL path map path rule." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rule set resource of URL path map path rule." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - } - }, - "description": "Properties of path rule of an application gateway." - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of Private Link Resource of an application gateway." - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private link configuration." - }, - "name": { - "type": "string", - "description": "Name of the private link configuration that is unique within an Application Gateway." - } - }, - "description": "Private Link Configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of application gateway private link ip configurations." - } - }, - "description": "Properties of private link configuration on an application gateway." - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of an application gateway private link ip configuration." - }, - "name": { - "type": "string", - "description": "The name of application gateway private link ip configuration." - } - }, - "description": "The application gateway private link ip configuration." - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - } - }, - "description": "Properties of an application gateway private link IP configuration." - }, - "ApplicationGatewayProbe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway probe." - }, - "name": { - "type": "string", - "description": "Name of the probe that is unique within an Application Gateway." - } - }, - "description": "Probe of the application gateway." - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "type": "object", - "properties": { - "body": { - "type": "string", - "description": "Body that must be contained in the health response. Default value is empty." - }, - "statusCodes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399." - } - }, - "description": "Application gateway probe health response match." - }, - "ApplicationGatewayProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol used for the probe." - }, - "host": { - "type": "string", - "description": "Host name to send the probe to." - }, - "path": { - "type": "string", - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:." - }, - "interval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds." - }, - "timeout": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds." - }, - "unhealthyThreshold": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20." - }, - "pickHostNameFromBackendHttpSettings": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the host header should be picked from the backend http settings. Default value is false." - }, - "minServers": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of servers that are always marked healthy. Default value is 0." - }, - "match": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Criterion for classifying a healthy probe response." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only." - } - }, - "description": "Properties of probe of an application gateway." - }, - "ApplicationGatewayPropertiesFormat": { - "type": "object", - "properties": { - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SKU of the application gateway resource." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "gatewayIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "authenticationCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "trustedClientCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "frontendPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Probes of the application gateway resource." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "backendHttpSettingsCollection": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "httpListeners": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "sslProfiles": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing rules of the application gateway resource." - }, - "rewriteRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules for the application gateway resource." - }, - "redirectConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)." - }, - "webApplicationFirewallConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall configuration." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the FirewallPolicy resource." - }, - "enableHttp2": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether HTTP2 is enabled on the application gateway resource." - }, - "enableFips": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether FIPS is enabled on the application gateway resource." - }, - "autoscaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Autoscale Configuration." - }, - "privateLinkConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "PrivateLink configurations on application gateway." - }, - "customErrorConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Custom error configurations of the application gateway resource." - }, - "forceFirewallPolicyAssociation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config." - } - }, - "description": "Properties of the application gateway." - }, - "ApplicationGatewayRedirectConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway redirect configuration." - }, - "name": { - "type": "string", - "description": "Name of the redirect configuration that is unique within an Application Gateway." - } - }, - "description": "Redirect configuration of an application gateway." - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "redirectType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP redirection type." - }, - "targetListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to a listener to redirect the request to." - }, - "targetUrl": { - "type": "string", - "description": "Url to redirect the request to." - }, - "includePath": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include path in the redirected url." - }, - "includeQueryString": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Include query string in the redirected url." - }, - "requestRoutingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request routing specifying redirect configuration." - }, - "urlPathMaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url path maps specifying default redirect configuration." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rules specifying redirect configuration." - } - }, - "description": "Properties of redirect configuration of the application gateway." - }, - "ApplicationGatewayRequestRoutingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway request routing rule." - }, - "name": { - "type": "string", - "description": "Name of the request routing rule that is unique within an Application Gateway." - } - }, - "description": "Request routing rule of an application gateway." - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "type": "object", - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "PathBasedRouting" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule type." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 20000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the request routing rule." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend address pool resource of the application gateway." - }, - "backendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Backend http settings resource of the application gateway." - }, - "httpListener": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Http listener resource of the application gateway." - }, - "urlPathMap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "URL path map resource of the application gateway." - }, - "rewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite Rule Set resource in Basic rule of the application gateway." - }, - "redirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Redirect configuration resource of the application gateway." - } - }, - "description": "Properties of request routing rule of the application gateway." - }, - "ApplicationGatewayRewriteRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the rewrite rule that is unique within an Application Gateway." - }, - "ruleSequence": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet." - }, - "conditions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Conditions based on which the action set execution will be evaluated." - }, - "actionSet": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Set of actions to be done as part of the rewrite Rule." - } - }, - "description": "Rewrite rule of an application gateway." - }, - "ApplicationGatewayRewriteRuleActionSet": { - "type": "object", - "properties": { - "requestHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Request Header Actions in the Action Set." - }, - "responseHeaderConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Response Header Actions in the Action Set." - }, - "urlConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Url Configuration Action in the Action Set." - } - }, - "description": "Set of actions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleCondition": { - "type": "object", - "properties": { - "variable": { - "type": "string", - "description": "The condition parameter of the RewriteRuleCondition." - }, - "pattern": { - "type": "string", - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition." - }, - "ignoreCase": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison." - }, - "negate": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Setting this value as truth will force to check the negation of the condition given by the user." - } - }, - "description": "Set of conditions in the Rewrite Rule in Application Gateway." - }, - "ApplicationGatewayRewriteRuleSet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway rewrite rule set." - }, - "name": { - "type": "string", - "description": "Name of the rewrite rule set that is unique within an Application Gateway." - } - }, - "description": "Rewrite rule set of an application gateway." - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "type": "object", - "properties": { - "rewriteRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Rewrite rules in the rewrite rule set." - } - }, - "description": "Properties of rewrite rule set of the application gateway." - }, - "applicationGateways_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway private endpoint connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections" - }, - "ApplicationGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an application gateway SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an application gateway." - }, - "capacity": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Capacity (instance count) of an application gateway." - } - }, - "description": "SKU of an application gateway." - }, - "ApplicationGatewaySslCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL certificate." - }, - "name": { - "type": "string", - "description": "Name of the SSL certificate that is unique within an Application Gateway." - } - }, - "description": "SSL certificates of an application gateway." - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request." - }, - "password": { - "type": "string", - "description": "Password for the pfx file specified in data. Only applicable in PUT request." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Properties of SSL certificates of an application gateway." - }, - "ApplicationGatewaySslPolicy": { - "type": "object", - "properties": { - "disabledSslProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl protocols to be disabled on application gateway." - }, - "policyType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Predefined", - "Custom" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Type of Ssl Policy." - }, - "policyName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Ssl predefined policy." - }, - "cipherSuites": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Ssl cipher suites to be enabled in the specified order to application gateway." - }, - "minProtocolVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum version of Ssl protocol to be supported on application gateway." - } - }, - "description": "Application Gateway Ssl policy." - }, - "ApplicationGatewaySslProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway SSL profile." - }, - "name": { - "type": "string", - "description": "Name of the SSL profile that is unique within an Application Gateway." - } - }, - "description": "SSL profile of an application gateway." - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "type": "object", - "properties": { - "trustedClientCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of references to application gateway trusted client certificates." - }, - "sslPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "SSL policy of the application gateway resource." - }, - "clientAuthConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Client authentication configuration of the application gateway resource." - } - }, - "description": "Properties of SSL profile of an application gateway." - }, - "ApplicationGatewayTrustedClientCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted client certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted client certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted client certificates of an application gateway." - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - } - }, - "description": "Trusted client certificates properties of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway trusted root certificate." - }, - "name": { - "type": "string", - "description": "Name of the trusted root certificate that is unique within an Application Gateway." - } - }, - "description": "Trusted Root certificates of an application gateway." - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "data": { - "type": "string", - "description": "Certificate public data." - }, - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - } - }, - "description": "Trusted Root certificates properties of an application gateway." - }, - "ApplicationGatewayUrlConfiguration": { - "type": "object", - "properties": { - "modifiedPath": { - "type": "string", - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null." - }, - "modifiedQueryString": { - "type": "string", - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null." - }, - "reroute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false." - } - }, - "description": "Url configuration of the Actions set in Application Gateway." - }, - "ApplicationGatewayUrlPathMap": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the application gateway URL path map." - }, - "name": { - "type": "string", - "description": "Name of the URL path map that is unique within an Application Gateway." - } - }, - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting." - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "type": "object", - "properties": { - "defaultBackendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend address pool resource of URL path map." - }, - "defaultBackendHttpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default backend http settings resource of URL path map." - }, - "defaultRewriteRuleSet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default Rewrite rule set resource of URL path map." - }, - "defaultRedirectConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Default redirect configuration resource of URL path map." - }, - "pathRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Path rule of URL path map resource." - } - }, - "description": "Properties of UrlPathMap of the application gateway." - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the web application firewall is enabled or not." - }, - "firewallMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Detection", - "Prevention" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Web application firewall mode." - }, - "ruleSetType": { - "type": "string", - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'." - }, - "ruleSetVersion": { - "type": "string", - "description": "The version of the rule set type." - }, - "disabledRuleGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The disabled rule groups." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether allow WAF to check request Body." - }, - "maxRequestBodySize": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size for WAF." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - }, - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The exclusion list." - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "description": "Application gateway web application firewall configuration." - }, - "ApplicationRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of Application Protocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "targetUrls": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Urls for this rule condition." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "terminateTLS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Terminate TLS connections for this rule." - }, - "webCategories": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination azure web categories." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type application." - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties." - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization." - }, - "AzureFirewallApplicationRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the application rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of ApplicationRuleProtocols." - }, - "targetFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for this rule." - }, - "fqdnTags": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDN Tags for this rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of an application rule." - }, - "AzureFirewallApplicationRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall application rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Application rule collection resource." - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the application rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a application rule collection." - } - }, - "description": "Properties of the application rule collection." - }, - "AzureFirewallApplicationRuleProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https", - "Mssql" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional." - } - }, - "description": "Properties of the application rule protocol." - }, - "AzureFirewallIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall IP configuration." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Azure Firewall." - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null." - } - }, - "description": "Properties of IP configuration of an Azure Firewall." - }, - "AzureFirewallNatRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Snat", - "Dnat" - ], - "description": "The type of action." - } - }, - "description": "AzureFirewall NAT Rule Collection Action." - }, - "AzureFirewallNatRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the NAT rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - } - }, - "description": "Properties of a NAT rule." - }, - "AzureFirewallNatRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall NAT rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "NAT rule collection resource." - }, - "AzureFirewallNatRuleCollectionProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the NAT rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a NAT rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a NAT rule collection." - } - }, - "description": "Properties of the NAT rule collection." - }, - "AzureFirewallNetworkRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the network rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "protocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of AzureFirewallNetworkRuleProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Properties of the network rule." - }, - "AzureFirewallNetworkRuleCollection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the azure firewall network rule collection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource." - } - }, - "description": "Network rule collection resource." - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the network rule collection resource." - }, - "action": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of rules used by a network rule collection." - } - }, - "description": "Properties of the network rule collection." - }, - "AzureFirewallPropertiesFormat": { - "type": "object", - "properties": { - "applicationRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of application rule collections used by Azure Firewall." - }, - "natRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of NAT rule collections used by Azure Firewall." - }, - "networkRuleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of network rule collections used by Azure Firewall." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall resource." - }, - "managementIpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Azure Firewall used for management traffic." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the firewall belongs." - }, - "firewallPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The firewallPolicy associated with this azure firewall." - }, - "hubIPAddresses": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP addresses associated with AzureFirewall." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Azure Firewall Resource SKU." - }, - "additionalProperties": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The additional properties used to further config this azure firewall." - } - }, - "description": "Properties of the Azure Firewall." - }, - "AzureFirewallPublicIPAddress": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "Public IP Address value." - } - }, - "description": "Public IP Address associated with azure firewall." - }, - "AzureFirewallRCAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the AzureFirewallRCAction." - }, - "AzureFirewallSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of an Azure Firewall SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of an Azure Firewall." - } - }, - "description": "SKU of an Azure Firewall." - }, - "BackendAddressPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Pool of backend IP addresses." - }, - "BackendAddressPoolPropertiesFormat": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "The location of the backend address pool." - }, - "loadBalancerBackendAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of backend addresses." - } - }, - "description": "Properties of the backend address pool." - }, - "BastionHostIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Represents the ip configuration associated with the resource." - }, - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration of an Bastion Host." - }, - "BastionHostIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference of the PublicIP resource." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Private IP allocation method." - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "description": "Properties of IP configuration of an Bastion Host." - }, - "BastionHostPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configuration of the Bastion Host resource." - }, - "dnsName": { - "type": "string", - "description": "FQDN for the endpoint on which bastion host is accessible." - } - }, - "description": "Properties of the Bastion Host." - }, - "BgpConnectionProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the bgp connection." - }, - "BgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - }, - "peerWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The weight added to routes learned from this BGP speaker." - }, - "bgpPeeringAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BGP peering address with IP configuration ID for virtual network gateway." - } - }, - "description": "BGP settings details." - }, - "BreakOutCategoryPolicies": { - "type": "object", - "properties": { - "allow": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 allow category." - }, - "optimize": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 optimize category." - }, - "default": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control breakout of o365 default category." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "ConnectionMonitorDestination": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the destination by connection monitor." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor destination (IP or domain name)." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port used by connection monitor." - } - }, - "description": "Describes the destination of connection monitor." - }, - "ConnectionMonitorEndpoint": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor endpoint." - }, - "type": { - "type": "string", - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "description": "The endpoint type." - }, - "resourceId": { - "type": "string", - "description": "Resource ID of the connection monitor endpoint." - }, - "address": { - "type": "string", - "description": "Address of the connection monitor endpoint (IP or domain name)." - }, - "filter": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Filter for sub-items within the endpoint." - }, - "scope": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Endpoint scope." - }, - "coverageLevel": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Test coverage for the endpoint." - } - }, - "required": [ - "name" - ], - "description": "Describes the connection monitor endpoint." - }, - "ConnectionMonitorEndpointFilter": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Include" - ], - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported." - }, - "items": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items in the filter." - } - }, - "description": "Describes the connection monitor endpoint filter." - }, - "ConnectionMonitorEndpointFilterItem": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "AgentAddress" - ], - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported." - }, - "address": { - "type": "string", - "description": "The address of the filter item." - } - }, - "description": "Describes the connection monitor endpoint filter item." - }, - "ConnectionMonitorEndpointScope": { - "type": "object", - "properties": { - "include": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items which needs to be included to the endpoint scope." - }, - "exclude": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of items which needs to be excluded from the endpoint scope." - } - }, - "description": "Describes the connection monitor endpoint scope." - }, - "ConnectionMonitorEndpointScopeItem": { - "type": "object", - "properties": { - "address": { - "type": "string", - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address." - } - }, - "description": "Describes the connection monitor endpoint scope item." - }, - "ConnectionMonitorHttpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "method": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Get", - "Post" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP method to use." - }, - "path": { - "type": "string", - "description": "The path component of the URI. For instance, \"/dir1/dir2\"." - }, - "requestHeaders": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HTTPHeader" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The HTTP headers to transmit with the request." - }, - "validStatusCodeRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\"." - }, - "preferHTTPS": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit." - } - }, - "description": "Describes the HTTP configuration." - }, - "ConnectionMonitorIcmpConfiguration": { - "type": "object", - "properties": { - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - } - }, - "description": "Describes the ICMP configuration." - }, - "ConnectionMonitorOutput": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Workspace" - ], - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported." - }, - "workspaceSettings": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the settings for producing output into a log analytics workspace." - } - }, - "description": "Describes a connection monitor output destination." - }, - "ConnectionMonitorParameters": { - "type": "object", - "properties": { - "source": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the source of connection monitor." - }, - "destination": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Describes the destination of connection monitor." - }, - "autoStart": { - "oneOf": [ - { - "type": "boolean", - "default": true - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Determines if the connection monitor will start automatically once created." - }, - "monitoringIntervalInSeconds": { - "oneOf": [ - { - "type": "integer", - "minimum": 30, - "maximum": 1800, - "default": "60" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Monitoring interval in seconds." - }, - "endpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor endpoints." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test configurations." - }, - "testGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor test groups." - }, - "outputs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of connection monitor outputs." - }, - "notes": { - "type": "string", - "description": "Optional notes to be associated with the connection monitor." - } - }, - "description": "Parameters that define the operation to create a connection monitor." - }, - "ConnectionMonitorSource": { - "type": "object", - "properties": { - "resourceId": { - "type": "string", - "description": "The ID of the resource used as the source by connection monitor." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port used by connection monitor." - } - }, - "required": [ - "resourceId" - ], - "description": "Describes the source of connection monitor." - }, - "ConnectionMonitorSuccessThreshold": { - "type": "object", - "properties": { - "checksFailedPercent": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful." - }, - "roundTripTimeMs": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful." - } - }, - "description": "Describes the threshold for declaring a test successful." - }, - "ConnectionMonitorTcpConfiguration": { - "type": "object", - "properties": { - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port to connect to." - }, - "disableTraceRoute": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether path evaluation with trace route should be disabled." - }, - "destinationPortBehavior": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "ListenIfAvailable" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination port behavior." - } - }, - "description": "Describes the TCP configuration." - }, - "ConnectionMonitorTestConfiguration": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test configuration." - }, - "testFrequencySec": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The frequency of test evaluation, in seconds." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Http", - "Icmp" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol to use in test evaluation." - }, - "preferredIPVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters." - }, - "httpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over HTTP." - }, - "tcpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over TCP." - }, - "icmpConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parameters used to perform test evaluation over ICMP." - }, - "successThreshold": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The threshold for declaring a test successful." - } - }, - "required": [ - "name", - "protocol" - ], - "description": "Describes a connection monitor test configuration." - }, - "ConnectionMonitorTestGroup": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the connection monitor test group." - }, - "disable": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Value indicating whether test group is disabled." - }, - "testConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of test configuration names." - }, - "sources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source endpoint names." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination endpoint names." - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "description": "Describes the connection monitor test group." - }, - "ConnectionMonitorWorkspaceSettings": { - "type": "object", - "properties": { - "workspaceResourceId": { - "type": "string", - "description": "Log analytics workspace resource ID." - } - }, - "description": "Describes the settings for producing output into a log analytics workspace." - }, - "ContainerNetworkInterfaceConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Container network interface configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "Container network interface configuration child resource." - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of ip configurations of the container network interface configuration." - }, - "containerNetworkInterfaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of container network interfaces created from this container network interface configuration." - } - }, - "description": "Container network interface configuration properties." - }, - "CustomDnsConfigPropertiesFormat": { - "type": "object", - "properties": { - "fqdn": { - "type": "string", - "description": "Fqdn that resolves to private endpoint ip address." - }, - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of private ip addresses of the private endpoint." - } - }, - "description": "Contains custom Dns resolution configuration from customer." - }, - "CustomIpPrefixPropertiesFormat": { - "type": "object", - "properties": { - "cidr": { - "type": "string", - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length." - }, - "commissionedState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The commissioned state of the Custom IP Prefix." - } - }, - "description": "Custom IP prefix properties." - }, - "DdosCustomPolicyPropertiesFormat": { - "type": "object", - "properties": { - "protocolCustomSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol-specific DDoS policy customization parameters." - } - }, - "description": "DDoS custom policy properties." - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties." - }, - "DdosSettings": { - "type": "object", - "properties": { - "ddosCustomPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS custom policy associated with the public IP." - }, - "protectionCoverage": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized." - }, - "protectedIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enables DDoS protection on the public IP." - } - }, - "description": "Contains the DDoS protection settings of the public IP." - }, - "Delegation": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Details the service to which the subnet is delegated." - }, - "DeviceProperties": { - "type": "object", - "properties": { - "deviceVendor": { - "type": "string", - "description": "Name of the device Vendor." - }, - "deviceModel": { - "type": "string", - "description": "Model of the device." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of the device." - }, - "DhcpOptions": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of DNS servers IP addresses." - } - }, - "required": [ - "dnsServers" - ], - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options." - }, - "DnsSettings": { - "type": "object", - "properties": { - "servers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of Custom DNS Servers." - }, - "enableProxy": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy." - }, - "requireProxyForNetworkRules": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "FQDNs in Network Rules are supported when set to true." - } - }, - "description": "DNS Proxy Settings in Firewall Policy." - }, - "DscpConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "markings": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "integer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of markings to be used in the configuration." - }, - "sourceIpRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosIpRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Source IP ranges." - }, - "destinationIpRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosIpRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination IP ranges." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosPortRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Sources port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/QosPortRange" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Destination port ranges." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "RNM supported protocol types." - } - }, - "description": "DSCP Configuration properties." - }, - "ExpressRouteCircuitAuthorization": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Authorization in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection." - }, - "peerExpressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit." - }, - "addressPrefix": { - "type": "string", - "description": "/29 IP address space to carve out Customer addresses for tunnels." - }, - "authorizationKey": { - "type": "string", - "description": "The authorization key." - }, - "ipv6CircuitConnectionConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IPv6 Address PrefixProperties of the express route circuit connection." - } - }, - "description": "Properties of the express route circuit connection." - }, - "ExpressRouteCircuitPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRouteCircuit resource." - }, - "ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "advertisedPublicPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to AdvertisedPublicPrefixes." - }, - "advertisedCommunities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The communities of bgp peering. Specified for microsoft peering." - }, - "legacyMode": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The legacy mode of the peering." - }, - "customerASN": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CustomerASN of the peering." - }, - "routingRegistryName": { - "type": "string", - "description": "The RoutingRegistryName of the configuration." - } - }, - "description": "Specifies the peering configuration." - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "stats": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering stats of express route circuit." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - }, - "expressRouteConnection": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute connection." - } - }, - "description": "Properties of the express route circuit peering." - }, - "ExpressRouteCircuitPropertiesFormat": { - "type": "object", - "properties": { - "allowClassicOperations": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Allow classic operations." - }, - "authorizations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of authorizations." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - }, - "serviceProviderNotes": { - "type": "string", - "description": "The ServiceProviderNotes." - }, - "serviceProviderProperties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ServiceProviderProperties." - }, - "expressRoutePort": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - } - }, - "description": "Properties of ExpressRouteCircuit." - }, - "expressRouteCircuits_authorizations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "authorizations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit authorization." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/authorizations" - }, - "expressRouteCircuits_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit peering." - }, - "resources": { - "type": "array", - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - } - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route circuit connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "type": "object", - "properties": { - "serviceProviderName": { - "type": "string", - "description": "The serviceProviderName." - }, - "peeringLocation": { - "type": "string", - "description": "The peering location." - }, - "bandwidthInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BandwidthInMbps." - } - }, - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitSku": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The tier of the SKU." - }, - "family": { - "oneOf": [ - { - "type": "string", - "enum": [ - "UnlimitedData", - "MeteredData" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The family of the SKU." - } - }, - "description": "Contains SKU in an ExpressRouteCircuit." - }, - "ExpressRouteCircuitStats": { - "type": "object", - "properties": { - "primarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Primary BytesIn of the peering." - }, - "primarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The primary BytesOut of the peering." - }, - "secondarybytesIn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesIn of the peering." - }, - "secondarybytesOut": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The secondary BytesOut of the peering." - } - }, - "description": "Contains stats associated with the peering." - }, - "ExpressRouteConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuitPeering": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRoute circuit peering." - }, - "authorizationKey": { - "type": "string", - "description": "Authorization key to establish the connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight associated to the connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable FastPath to vWan Firewall hub." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "description": "Properties of the ExpressRouteConnection subresource." - }, - "ExpressRouteCrossConnectionPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Peering in an ExpressRoute Cross Connection resource." - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "type": "object", - "properties": { - "peeringType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering type." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peering state." - }, - "peerASN": { - "oneOf": [ - { - "type": "integer", - "minimum": 1, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The peer ASN." - }, - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "sharedKey": { - "type": "string", - "description": "The shared key." - }, - "vlanId": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VLAN ID." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "gatewayManagerEtag": { - "type": "string", - "description": "The GatewayManager Etag." - }, - "ipv6PeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPv6 peering configuration." - } - }, - "description": "Properties of express route cross connection peering." - }, - "ExpressRouteCrossConnectionProperties": { - "type": "object", - "properties": { - "expressRouteCircuit": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ExpressRouteCircuit." - }, - "serviceProviderProvisioningState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The provisioning state of the circuit in the connectivity provider system." - }, - "serviceProviderNotes": { - "type": "string", - "description": "Additional read only notes set by the connectivity provider." - }, - "peerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of peerings." - } - }, - "description": "Properties of ExpressRouteCrossConnection." - }, - "expressRouteCrossConnections_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route cross connection peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteCrossConnections/peerings" - }, - "ExpressRouteGatewayProperties": { - "type": "object", - "properties": { - "autoScaleConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configuration for auto scaling." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed." - } - }, - "required": [ - "virtualHub" - ], - "description": "ExpressRoute gateway resource properties." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "type": "object", - "properties": { - "bounds": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum and maximum number of scale units to deploy." - } - }, - "description": "Configuration for auto scaling." - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "type": "object", - "properties": { - "min": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Minimum number of scale units deployed for ExpressRoute gateway." - }, - "max": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum number of scale units deployed for ExpressRoute gateway." - } - }, - "description": "Minimum and maximum number of scale units to deploy." - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "expressRouteConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the express route connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections" - }, - "ExpressRouteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ExpressRouteLink properties." - }, - "name": { - "type": "string", - "description": "Name of child port resource that is unique among child port resources of the parent." - } - }, - "description": "ExpressRouteLink child resource definition." - }, - "ExpressRouteLinkMacSecConfig": { - "type": "object", - "properties": { - "cknSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CKN key." - }, - "cakSecretIdentifier": { - "type": "string", - "description": "Keyvault Secret Identifier URL containing Mac security CAK key." - }, - "cipher": { - "oneOf": [ - { - "type": "string", - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Mac security cipher." - }, - "sciState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Sci mode enabled/disabled." - } - }, - "description": "ExpressRouteLink Mac Security Configuration." - }, - "ExpressRouteLinkPropertiesFormat": { - "type": "object", - "properties": { - "adminState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Enabled", - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Administrative state of the physical port." - }, - "macSecConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "MacSec configuration." - } - }, - "description": "Properties specific to ExpressRouteLink resources." - }, - "ExpressRoutePortPropertiesFormat": { - "type": "object", - "properties": { - "peeringLocation": { - "type": "string", - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically." - }, - "bandwidthInGbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bandwidth of procured ports in Gbps." - }, - "encapsulation": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Dot1Q", - "QinQ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Encapsulation method on physical ports." - }, - "links": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ExpressRouteLink" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of physical links of the ExpressRoutePort resource." - } - }, - "description": "Properties specific to ExpressRoutePort resources." - }, - "ExtendedLocation": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the extended location." - }, - "type": { - "type": "string", - "enum": [ - "EdgeZone" - ], - "description": "The type of the extended location." - } - }, - "required": [ - "name", - "type" - ], - "description": "ExtendedLocation complex type." - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ruleCollectionGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the firewall policy rule collection group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - }, - "FirewallPolicyCertificateAuthority": { - "type": "object", - "properties": { - "keyVaultSecretId": { - "type": "string", - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." - }, - "name": { - "type": "string", - "description": "Name of the CA certificate." - } - }, - "description": "Trusted Root certificates properties for tls." - }, - "FirewallPolicyFilterRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Filter rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy Filter Rule Collection." - }, - "FirewallPolicyFilterRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Allow", - "Deny" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction." - }, - "FirewallPolicyInsights": { - "type": "object", - "properties": { - "isEnabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A flag to indicate if the insights are enabled on the policy." - }, - "retentionDays": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days the insights should be enabled on the policy." - }, - "logAnalyticsResources": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Workspaces needed to configure the Firewall Policy Insights." - } - }, - "description": "Firewall Policy Insights." - }, - "FirewallPolicyIntrusionDetection": { - "type": "object", - "properties": { - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Off", - "Alert", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Intrusion detection general state." - }, - "configuration": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Intrusion detection configuration properties." - } - }, - "description": "Configuration for intrusion detection mode and rules." - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the bypass traffic rule." - }, - "description": { - "type": "string", - "description": "Description of the bypass traffic rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule bypass protocol." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses or ranges for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or ranges for this rule." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports or ranges." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - } - }, - "description": "Intrusion detection bypass traffic specification." - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "type": "object", - "properties": { - "signatureOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of specific signatures states." - }, - "bypassTrafficSettings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules for traffic to bypass." - } - }, - "description": "The operation for configuring intrusion detection." - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Signature id." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Off", - "Alert", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The signature state." - } - }, - "description": "Intrusion detection signatures specification states." - }, - "FirewallPolicyLogAnalyticsResources": { - "type": "object", - "properties": { - "workspaces": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of workspaces for Firewall Policy Insights." - }, - "defaultWorkspaceId": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The default workspace Id for Firewall Policy Insights." - } - }, - "description": "Log Analytics Resources for Firewall Policy Insights." - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "type": "object", - "properties": { - "region": { - "type": "string", - "description": "Region to configure the Workspace." - }, - "workspaceId": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The workspace Id for Firewall Policy Insights." - } - }, - "description": "Log Analytics Workspace for Firewall Policy Insights." - }, - "FirewallPolicyNatRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "action": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The action type of a Nat rule collection." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules included in a rule collection." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Firewall Policy NAT Rule Collection." - }, - "FirewallPolicyNatRuleCollectionAction": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "DNAT" - ], - "description": "The type of action." - } - }, - "description": "Properties of the FirewallPolicyNatRuleCollectionAction." - }, - "FirewallPolicyPropertiesFormat": { - "type": "object", - "properties": { - "basePolicy": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The parent firewall policy from which rules are inherited." - }, - "threatIntelMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Alert", - "Deny", - "Off" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operation mode for Threat Intelligence." - }, - "threatIntelWhitelist": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "insights": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Insights on Firewall Policy." - }, - "snat": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySNAT" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "DNS Proxy Settings definition." - }, - "intrusionDetection": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The configuration for Intrusion detection." - }, - "transportSecurity": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "TLS Configuration definition." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Firewall Policy SKU." - } - }, - "description": "Firewall Policy definition." - }, - "FirewallPolicyRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/ApplicationRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ApplicationRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NatRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/NetworkRule" - } - ], - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "Name of the rule." - }, - "description": { - "type": "string", - "description": "Description of the rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Properties of a rule." - }, - "FirewallPolicyRuleApplicationProtocol": { - "type": "object", - "properties": { - "protocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol type." - }, - "port": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 64000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Port number for the protocol, cannot be greater than 64000." - } - }, - "description": "Properties of the application rule protocol." - }, - "FirewallPolicyRuleCollection": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyNatRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - }, - { - "allOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollection" - } - ], - "properties": { - "ruleCollectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "FirewallPolicyFilterRuleCollection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "name": { - "type": "string", - "description": "The name of the rule collection." - }, - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection resource." - }, - "ruleCollectionType": { - "type": "string" - } - }, - "required": [ - "ruleCollectionType" - ], - "description": "Properties of the rule collection." - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "type": "object", - "properties": { - "priority": { - "oneOf": [ - { - "type": "integer", - "minimum": 100, - "maximum": 65000 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Priority of the Firewall Policy Rule Collection Group resource." - }, - "ruleCollections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Group of Firewall Policy rule collections." - } - }, - "description": "Properties of the rule collection group." - }, - "FirewallPolicySku": { - "type": "object", - "properties": { - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard", - "Premium" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of Firewall Policy." - } - }, - "description": "SKU of Firewall policy." - }, - "FirewallPolicySNAT": { - "type": "object", - "properties": { - "privateRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of private IP addresses/IP address ranges to not be SNAT." - } - }, - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT." - }, - "FirewallPolicyThreatIntelWhitelist": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of IP addresses for the ThreatIntel Whitelist." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of FQDNs for the ThreatIntel Whitelist." - } - }, - "description": "ThreatIntel Whitelist for Firewall Policy." - }, - "FirewallPolicyTransportSecurity": { - "type": "object", - "properties": { - "certificateAuthority": { - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CA used for intermediate CA generation." - } - }, - "description": "Configuration needed to perform TLS termination & initiation." - }, - "FlowLogFormatParameters": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "JSON" - ], - "description": "The file type of flow log." - }, - "version": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The version (revision) of the flow log." - } - }, - "description": "Parameters that define the flow log format." - }, - "FlowLogPropertiesFormat": { - "type": "object", - "properties": { - "targetResourceId": { - "type": "string", - "description": "ID of network security group to which flow log will be applied." - }, - "storageId": { - "type": "string", - "description": "ID of the storage account which is used to store the flow log." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable flow logging." - }, - "retentionPolicy": { - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the retention policy for flow log." - }, - "format": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the flow log format." - }, - "flowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "description": "Parameters that define the configuration of flow log." - }, - "FrontendIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "name" - ], - "description": "Frontend IP address of the load balancer." - }, - "FrontendIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Private IP allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Public IP Prefix resource." - } - }, - "description": "Properties of Frontend IP Configuration of the load balancer." - }, - "HTTPHeader": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name in HTTP header." - }, - "value": { - "type": "string", - "description": "The value in HTTP header." - } - }, - "description": "The HTTP header." - }, - "HubIPAddresses": { - "type": "object", - "properties": { - "publicIPs": { - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP addresses associated with azure firewall." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP Address associated with azure firewall." - } - }, - "description": "IP addresses associated with azure firewall." - }, - "HubIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of IP configuration." - }, - "HubPublicIPAddresses": { - "type": "object", - "properties": { - "addresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained." - }, - "count": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of Public IP addresses associated with azure firewall." - } - }, - "description": "Public IP addresses associated with azure firewall." - }, - "HubRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route." - }, - "destinationType": { - "type": "string", - "description": "The type of destinations (eg: CIDR, ResourceId, Service)." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hop (eg: ResourceId)." - }, - "nextHop": { - "type": "string", - "description": "NextHop resource ID." - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "description": "RouteTable route." - }, - "HubRouteTableProperties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/HubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of labels associated with this route table." - } - }, - "description": "Parameters for RouteTable." - }, - "HubVirtualNetworkConnectionProperties": { - "type": "object", - "properties": { - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the remote virtual network." - }, - "allowHubToRemoteVnetTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not." - }, - "allowRemoteVnetToUseHubVnetGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for HubVirtualNetworkConnection." - }, - "InboundNatPool": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat pool." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT pool of the load balancer." - }, - "InboundNatPoolPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the inbound NAT pool." - }, - "frontendPortRangeStart": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534." - }, - "frontendPortRangeEnd": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "description": "Properties of Inbound NAT pool." - }, - "InboundNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Inbound NAT rule of the load balancer." - }, - "InboundNatRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the inbound NAT rule." - }, - "InboundSecurityRuleProperties": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundSecurityRules" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of allowed rules." - } - }, - "description": "Properties of the Inbound Security Rules resource." - }, - "InboundSecurityRules": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol. This should be either TCP or UDP." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed." - }, - "destinationPortRange": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 65535 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NVA port ranges to be opened up. One needs to provide specific ports." - } - }, - "description": "Properties of the Inbound Security Rules resource." - }, - "IpAllocationPropertiesFormat": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Undefined", - "Hypernet" - ], - "description": "The type for the IpAllocation." - }, - "prefix": { - "type": "string", - "description": "The address prefix for the IpAllocation." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix length for the IpAllocation." - }, - "prefixType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The address prefix Type for the IpAllocation." - }, - "ipamAllocationId": { - "type": "string", - "description": "The IPAM allocation ID." - }, - "allocationTags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAllocation tags." - } - }, - "description": "Properties of the IpAllocation." - }, - "IPConfigurationBgpPeeringAddress": { - "type": "object", - "properties": { - "ipconfigurationId": { - "type": "string", - "description": "The ID of IP configuration which belongs to gateway." - }, - "customBgpIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of custom BGP peering addresses which belong to IP configuration." - } - }, - "description": "Properties of IPConfigurationBgpPeeringAddress." - }, - "IPConfigurationProfile": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the IP configuration profile." - }, - "name": { - "type": "string", - "description": "The name of the resource. This name can be used to access the resource." - } - }, - "description": "IP configuration profile child resource." - }, - "IPConfigurationProfilePropertiesFormat": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource to create a container network interface ip configuration." - } - }, - "description": "IP configuration profile properties." - }, - "IpGroupPropertiesFormat": { - "type": "object", - "properties": { - "ipAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource." - } - }, - "description": "The IpGroups property information." - }, - "IpsecPolicy": { - "type": "object", - "properties": { - "saLifeTimeSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel." - }, - "saDataSizeKilobytes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel." - }, - "ipsecEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec encryption algorithm (IKE phase 1)." - }, - "ipsecIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec integrity algorithm (IKE phase 1)." - }, - "ikeEncryption": { - "oneOf": [ - { - "type": "string", - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE encryption algorithm (IKE phase 2)." - }, - "ikeIntegrity": { - "oneOf": [ - { - "type": "string", - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IKE integrity algorithm (IKE phase 2)." - }, - "dhGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DH Group used in IKE Phase 1 for initial SA." - }, - "pfsGroup": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Pfs Group used in IKE Phase 2 for new child SA." - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "description": "An IPSec Policy configuration for a virtual network gateway connection." - }, - "IpTag": { - "type": "object", - "properties": { - "ipTagType": { - "type": "string", - "description": "The IP tag type. Example: FirstPartyUsage." - }, - "tag": { - "type": "string", - "description": "The value of the IP tag associated with the public IP. Example: SQL." - } - }, - "description": "Contains the IpTag associated with the object." - }, - "Ipv6CircuitConnectionConfig": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "/125 IP address space to carve out customer addresses for global reach." - } - }, - "description": "IPv6 Circuit Connection properties for global reach." - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "type": "object", - "properties": { - "primaryPeerAddressPrefix": { - "type": "string", - "description": "The primary address prefix." - }, - "secondaryPeerAddressPrefix": { - "type": "string", - "description": "The secondary address prefix." - }, - "microsoftPeeringConfig": { - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Microsoft peering configuration." - }, - "routeFilter": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteFilter resource." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of peering." - } - }, - "description": "Contains IPv6 peering config." - }, - "LoadBalancerBackendAddress": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - }, - "name": { - "type": "string", - "description": "Name of the backend address." - } - }, - "description": "Load balancer backend addresses." - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to an existing virtual network." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to an existing subnet." - }, - "ipAddress": { - "type": "string", - "description": "IP Address belonging to the referenced virtual network." - }, - "loadBalancerFrontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer." - } - }, - "description": "Properties of the load balancer backend addresses." - }, - "LoadBalancerPropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object representing the frontend IPs to be used for the load balancer." - }, - "backendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/BackendAddressPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of backend address pools used by a load balancer." - }, - "loadBalancingRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/LoadBalancingRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Object collection representing the load balancing rules Gets the provisioning." - }, - "probes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Probe" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of probe objects used in the load balancer." - }, - "inboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "inboundNatPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/InboundNatPool" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules." - }, - "outboundRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OutboundRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The outbound rules." - } - }, - "description": "Properties of the load balancer." - }, - "loadBalancers_backendAddressPools_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "backendAddressPools" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer backend address pool." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/backendAddressPools" - }, - "loadBalancers_inboundNatRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundNatRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer inbound nat rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/loadBalancers/inboundNatRules" - }, - "LoadBalancerSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a load balancer SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Regional", - "Global" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of a load balancer SKU." - } - }, - "description": "SKU of a load balancer." - }, - "LoadBalancingRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer load balancing rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancing rule for a load balancer." - }, - "LoadBalancingRulePropertiesFormat": { - "type": "object", - "properties": { - "frontendIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to frontend IP addresses." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "probe": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the load balancer probe used by the load balancing rule." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Udp", - "Tcp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the transport protocol used by the load balancing rule." - }, - "loadDistribution": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The load distribution policy for this rule." - }, - "frontendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"." - }, - "backendPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP." - }, - "enableFloatingIP": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "disableOutboundSnat": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule." - } - }, - "required": [ - "frontendIPConfiguration", - "protocol", - "frontendPort", - "backendPort" - ], - "description": "Properties of the load balancer." - }, - "LocalNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "localNetworkAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network site address space." - }, - "gatewayIpAddress": { - "type": "string", - "description": "IP address of local network gateway." - }, - "fqdn": { - "type": "string", - "description": "FQDN of local network gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - } - }, - "description": "LocalNetworkGateway properties." - }, - "ManagedRuleGroupOverride": { - "type": "object", - "properties": { - "ruleGroupName": { - "type": "string", - "description": "The managed rule group to override." - }, - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." - } - }, - "required": [ - "ruleGroupName" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRuleOverride": { - "type": "object", - "properties": { - "ruleId": { - "type": "string", - "description": "Identifier for the managed rule." - }, - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the managed rule. Defaults to Disabled if not specified." - } - }, - "required": [ - "ruleId" - ], - "description": "Defines a managed rule group override setting." - }, - "ManagedRulesDefinition": { - "type": "object", - "properties": { - "exclusions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Exclusions that are applied on the policy." - }, - "managedRuleSets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleSet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The managed rule sets that are associated with the policy." - } - }, - "required": [ - "managedRuleSets" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "ManagedRuleSet": { - "type": "object", - "properties": { - "ruleSetType": { - "type": "string", - "description": "Defines the rule set type to use." - }, - "ruleSetVersion": { - "type": "string", - "description": "Defines the version of the rule set to use." - }, - "ruleGroupOverrides": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Defines the rule group overrides to apply to the rule set." - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "description": "Defines a managed rule set." - }, - "ManagedServiceIdentity": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine." - }, - "userAssignedIdentities": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/ManagedServiceIdentityUserAssignedIdentitiesValue" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'." - } - }, - "description": "Identity for the resource." - }, - "ManagedServiceIdentityUserAssignedIdentitiesValue": {}, - "MatchCondition": { - "type": "object", - "properties": { - "matchVariables": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/MatchVariable" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of match variables." - }, - "operator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The operator to be matched." - }, - "negationConditon": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is negate condition or not." - }, - "matchValues": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match value." - }, - "transforms": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of transforms." - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "description": "Define match conditions." - }, - "MatchVariable": { - "type": "object", - "properties": { - "variableName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Match Variable." - }, - "selector": { - "type": "string", - "description": "The selector of match variable." - } - }, - "required": [ - "variableName" - ], - "description": "Define match variables." - }, - "NatGatewayPropertiesFormat": { - "type": "object", - "properties": { - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the nat gateway." - }, - "publicIpAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip addresses associated with the nat gateway resource." - }, - "publicIpPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of public ip prefixes associated with the nat gateway resource." - } - }, - "description": "Nat Gateway properties." - }, - "NatGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of Nat Gateway SKU." - } - }, - "description": "SKU of nat gateway." - }, - "NatRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NatRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "translatedAddress": { - "type": "string", - "description": "The translated address for this NAT rule." - }, - "translatedPort": { - "type": "string", - "description": "The translated port for this NAT rule." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "translatedFqdn": { - "type": "string", - "description": "The translated FQDN for this NAT rule." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type nat." - }, - "NetworkInterfaceDnsSettings": { - "type": "object", - "properties": { - "dnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection." - }, - "internalDnsNameLabel": { - "type": "string", - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network." - } - }, - "description": "DNS settings of a network interface." - }, - "NetworkInterfaceIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network interface IP configuration properties." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "IPConfiguration in a network interface." - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTaps": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to Virtual Network Taps." - }, - "applicationGatewayBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to ApplicationGatewayBackendAddressPool resource." - }, - "loadBalancerBackendAddressPools": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to LoadBalancerBackendAddressPool resource." - }, - "loadBalancerInboundNatRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of references of LoadBalancerInboundNatRules." - }, - "privateIPAddress": { - "type": "string", - "description": "Private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Subnet bound to the IP configuration." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether this is a primary customer address on the network interface." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address bound to the IP configuration." - }, - "applicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Application security groups in which the IP configuration is included." - } - }, - "description": "Properties of IP configuration." - }, - "NetworkInterfacePropertiesFormat": { - "type": "object", - "properties": { - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of IPConfigurations of the network interface." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DNS settings in network interface." - }, - "enableAcceleratedNetworking": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If the network interface is accelerated networking enabled." - }, - "enableIPForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates whether IP forwarding is enabled on this network interface." - } - }, - "required": [ - "ipConfigurations" - ], - "description": "NetworkInterface properties." - }, - "networkInterfaces_tapConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "tapConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the Virtual Network Tap configuration." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkInterfaces/tapConfigurations" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "virtualNetworkTap": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the Virtual Network Tap resource." - } - }, - "description": "Properties of Virtual Network Tap configuration." - }, - "NetworkProfilePropertiesFormat": { - "type": "object", - "properties": { - "containerNetworkInterfaceConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of chid container network interface configurations." - } - }, - "description": "Network profile properties." - }, - "NetworkRule": { - "type": "object", - "oneOf": [ - { - "properties": { - "ruleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "NetworkRule" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - } - } - ], - "properties": { - "ipProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of FirewallPolicyRuleNetworkProtocols." - }, - "sourceAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IP addresses for this rule." - }, - "destinationAddresses": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IP addresses or Service Tags." - }, - "destinationPorts": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination ports." - }, - "sourceIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of source IpGroups for this rule." - }, - "destinationIpGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination IpGroups for this rule." - }, - "destinationFqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of destination FQDNs." - }, - "ruleType": { - "type": "string" - } - }, - "required": [ - "ruleType" - ], - "description": "Rule of type network." - }, - "NetworkSecurityGroupPropertiesFormat": { - "type": "object", - "properties": { - "securityRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SecurityRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of security rules of the network security group." - } - }, - "description": "Network Security Group resource." - }, - "networkSecurityGroups_securityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "securityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkSecurityGroups/securityRules" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "type": "object", - "properties": { - "nvaSku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network Virtual Appliance SKU." - }, - "bootStrapConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "BootStrapConfigurationBlobs storage URLs." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Virtual Hub where Network Virtual Appliance is being deployed." - }, - "cloudInitConfigurationBlobs": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "CloudInitConfigurationBlob storage URLs." - }, - "cloudInitConfiguration": { - "type": "string", - "description": "CloudInitConfiguration string in plain text." - }, - "virtualApplianceAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualAppliance ASN." - } - }, - "description": "Network Virtual Appliance definition." - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "inboundSecurityRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Inbound Security Rules." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualApplianceSites" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Appliance Sites." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties." - }, - "networkWatchers_connectionMonitors_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "connectionMonitors" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Connection monitor location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection monitor tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the connection monitor." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/connectionMonitors" - }, - "networkWatchers_flowLogs_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "flowLogs" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the flow log." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "location", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/flowLogs" - }, - "networkWatchers_packetCaptures_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "packetCaptures" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the packet capture." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/networkWatchers/packetCaptures" - }, - "O365BreakOutCategoryPolicies": { - "type": "object", - "properties": { - "allow": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control allow category." - }, - "optimize": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control optimize category." - }, - "default": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control default category." - } - }, - "description": "Office365 breakout categories." - }, - "O365PolicyProperties": { - "type": "object", - "properties": { - "breakOutCategories": { - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office365 breakout categories." - } - }, - "description": "The Office365 breakout policy." - }, - "Office365PolicyProperties": { - "type": "object", - "properties": { - "breakOutCategories": { - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 breakout categories." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "OutboundRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer outbound rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource." - } - }, - "description": "Outbound rule of the load balancer." - }, - "OutboundRulePropertiesFormat": { - "type": "object", - "properties": { - "allocatedOutboundPorts": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of outbound ports to be used for NAT." - }, - "frontendIPConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Frontend IP addresses of the load balancer." - }, - "backendAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "All" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for the outbound rule in load balancer." - }, - "enableTcpReset": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The timeout for the TCP idle connection." - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "description": "Outbound rule of the load balancer." - }, - "OwaspCrsExclusionEntry": { - "type": "object", - "properties": { - "matchVariable": { - "oneOf": [ - { - "type": "string", - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The variable to be excluded." - }, - "selectorMatchOperator": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to." - }, - "selector": { - "type": "string", - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to." - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "description": "Allow to exclude some variable satisfy the condition for the WAF check." - }, - "P2SConnectionConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the P2S connection configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "P2SConnectionConfiguration Resource." - }, - "P2SConnectionConfigurationProperties": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not." - } - }, - "description": "Parameters for P2SConnectionConfiguration." - }, - "P2SVpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "p2SConnectionConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all p2s connection configurations of the gateway." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this p2s vpn gateway." - }, - "vpnServerConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to." - }, - "customDnsServers": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all customer specified DNS servers IP addresses." - }, - "isRoutingPreferenceInternet": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway." - } - }, - "description": "Parameters for P2SVpnGateway." - }, - "PacketCaptureFilter": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "TCP", - "UDP", - "Any" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Protocol to be filtered on." - }, - "localIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remoteIPAddress": { - "type": "string", - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "localPort": { - "type": "string", - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - }, - "remotePort": { - "type": "string", - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null." - } - }, - "description": "Filter that is applied to packet capture request. Multiple filters can be applied." - }, - "PacketCaptureParameters": { - "type": "object", - "properties": { - "target": { - "type": "string", - "description": "The ID of the targeted resource, only VM is currently supported." - }, - "bytesToCapturePerPacket": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295, - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of bytes captured per packet, the remaining bytes are truncated." - }, - "totalBytesPerSession": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295, - "default": "1073741824" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum size of the capture output." - }, - "timeLimitInSeconds": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 18000, - "default": "18000" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum duration of the capture session in seconds." - }, - "storageLocation": { - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The storage location for a packet capture session." - }, - "filters": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of packet capture filters." - } - }, - "required": [ - "target", - "storageLocation" - ], - "description": "Parameters that define the create packet capture operation." - }, - "PacketCaptureStorageLocation": { - "type": "object", - "properties": { - "storageId": { - "type": "string", - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided." - }, - "storagePath": { - "type": "string", - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture." - }, - "filePath": { - "type": "string", - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional." - } - }, - "description": "The storage location for a packet capture session." - }, - "PolicySettings": { - "type": "object", - "properties": { - "state": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Disabled", - "Enabled" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The state of the policy." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Prevention", - "Detection" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The mode of the policy." - }, - "requestBodyCheck": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to allow WAF to check request Body." - }, - "maxRequestBodySizeInKb": { - "oneOf": [ - { - "type": "integer", - "minimum": 8, - "maximum": 128 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum request body size in Kb for WAF." - }, - "fileUploadLimitInMb": { - "oneOf": [ - { - "type": "integer", - "minimum": 0 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Maximum file upload size in Mb for WAF." - } - }, - "description": "Defines contents of a web application firewall global configuration." - }, - "PrivateDnsZoneConfig": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone configuration." - } - }, - "description": "PrivateDnsZoneConfig resource." - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of private dns zone configurations of the private dns zone group." - } - }, - "description": "Properties of the private dns zone group." - }, - "PrivateDnsZonePropertiesFormat": { - "type": "object", - "properties": { - "privateDnsZoneId": { - "type": "string", - "description": "The resource id of the private dns zone." - } - }, - "description": "Properties of the private dns zone configuration resource." - }, - "PrivateEndpointConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of information about the state of the connection between service consumer and provider." - } - }, - "description": "Properties of the PrivateEndpointConnectProperties." - }, - "PrivateEndpointProperties": { - "type": "object", - "properties": { - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID of the subnet from which the private IP will be allocated." - }, - "privateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource." - }, - "manualPrivateLinkServiceConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource." - }, - "customDnsConfigs": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of custom dns configurations." - } - }, - "description": "Properties of the private endpoint." - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateDnsZoneGroups" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private dns zone group." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - }, - "PrivateLinkServiceConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "PrivateLinkServiceConnection resource." - }, - "PrivateLinkServiceConnectionProperties": { - "type": "object", - "properties": { - "privateLinkServiceId": { - "type": "string", - "description": "The resource id of private link service." - }, - "groupIds": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to." - }, - "requestMessage": { - "type": "string", - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars." - }, - "privateLinkServiceConnectionState": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of read-only information about the state of the connection to the remote resource." - } - }, - "description": "Properties of the PrivateLinkServiceConnection." - }, - "PrivateLinkServiceConnectionState": { - "type": "object", - "properties": { - "status": { - "type": "string", - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service." - }, - "description": { - "type": "string", - "description": "The reason for approval/rejection of the connection." - }, - "actionsRequired": { - "type": "string", - "description": "A message indicating if changes on the service provider require any updates on the consumer." - } - }, - "description": "A collection of information about the state of the connection between service consumer and provider." - }, - "PrivateLinkServiceIpConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private link service ip configuration." - }, - "name": { - "type": "string", - "description": "The name of private link service ip configuration." - } - }, - "description": "The private link service ip configuration." - }, - "PrivateLinkServiceIpConfigurationProperties": { - "type": "object", - "properties": { - "privateIPAddress": { - "type": "string", - "description": "The private IP address of the IP configuration." - }, - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "primary": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the ip configuration is primary or not." - }, - "privateIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4." - } - }, - "description": "Properties of private link service IP configuration." - }, - "PrivateLinkServiceProperties": { - "type": "object", - "properties": { - "loadBalancerFrontendIpConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the load balancer IP configurations." - }, - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of private link service IP configurations." - }, - "visibility": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The visibility list of the private link service." - }, - "autoApproval": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The auto-approval list of the private link service." - }, - "fqdns": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of Fqdn." - }, - "enableProxyProtocol": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the private link service is enabled for proxy protocol or not." - } - }, - "description": "Properties of the private link service." - }, - "PrivateLinkServicePropertiesAutoApproval": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The auto-approval list of the private link service." - }, - "PrivateLinkServicePropertiesVisibility": { - "type": "object", - "properties": { - "subscriptions": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of subscriptions." - } - }, - "description": "The visibility list of the private link service." - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "privateEndpointConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the private end point connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections" - }, - "Probe": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of load balancer probe." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "A load balancer probe." - }, - "ProbePropertiesFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Http", - "Tcp", - "Https" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful." - }, - "port": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive." - }, - "intervalInSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5." - }, - "numberOfProbes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure." - }, - "requestPath": { - "type": "string", - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value." - } - }, - "required": [ - "protocol", - "port", - "numberOfProbes" - ], - "description": "Load balancer probe resource." - }, - "PropagatedRouteTable": { - "type": "object", - "properties": { - "labels": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of labels." - }, - "ids": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of resource ids of all the RouteTables." - } - }, - "description": "The list of RouteTables to advertise the routes to." - }, - "ProtocolCustomSettingsFormat": { - "type": "object", - "properties": { - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Syn" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The protocol for which the DDoS protection policy is being customized." - }, - "triggerRateOverride": { - "type": "string", - "description": "The customized DDoS protection trigger rate." - }, - "sourceRateOverride": { - "type": "string", - "description": "The customized DDoS protection source rate." - }, - "triggerSensitivityOverride": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic." - } - }, - "description": "DDoS custom policy properties." - }, - "PublicIPAddress": { - "type": "object", - "properties": { - "location": { - "type": "string", - "description": "Resource location." - }, - "tags": { - "oneOf": [ - { - "type": "object", - "additionalProperties": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Resource tags." - }, - "extendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of the public ip address." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address SKU." - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Public IP address properties." - }, - "zones": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from." - } - }, - "required": [ - "location" - ], - "description": "Public IP address resource." - }, - "PublicIPAddressDnsSettings": { - "type": "object", - "properties": { - "domainNameLabel": { - "type": "string", - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system." - }, - "fqdn": { - "type": "string", - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone." - }, - "reverseFqdn": { - "type": "string", - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN." - } - }, - "required": [ - "domainNameLabel" - ], - "description": "Contains FQDN of the DNS record associated with the public IP address." - }, - "PublicIPAddressPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address allocation method." - }, - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "dnsSettings": { - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The FQDN of the DNS record associated with the public IP address." - }, - "ddosSettings": { - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection custom policy associated with the public IP address." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP address." - }, - "ipAddress": { - "type": "string", - "description": "The IP address associated with the public IP address resource." - }, - "publicIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Public IP Prefix this Public IP Address should be allocated from." - }, - "idleTimeoutInMinutes": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The idle timeout of the public IP address." - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "description": "Public IP address properties." - }, - "PublicIPAddressSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP address SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Regional", - "Global" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of a public IP address SKU." - } - }, - "description": "SKU of a public IP address." - }, - "PublicIPPrefixPropertiesFormat": { - "type": "object", - "properties": { - "publicIPAddressVersion": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPv4", - "IPv6" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The public IP address version." - }, - "ipTags": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpTag" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of tags associated with the public IP prefix." - }, - "prefixLength": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Length of the Public IP Prefix." - }, - "customIPPrefix": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The customIpPrefix that this prefix is associated with." - } - }, - "description": "Public IP prefix properties." - }, - "PublicIPPrefixSku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Standard" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Name of a public IP prefix SKU." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Regional", - "Global" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Tier of a public IP prefix SKU." - } - }, - "description": "SKU of a public IP prefix." - }, - "QosIpRange": { - "type": "object", - "properties": { - "startIP": { - "type": "string", - "description": "Start IP Address." - }, - "endIP": { - "type": "string", - "description": "End IP Address." - } - }, - "description": "Qos Traffic Profiler IP Range properties." - }, - "QosPortRange": { - "type": "object", - "properties": { - "start": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Qos Port Range start." - }, - "end": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Qos Port Range end." - } - }, - "description": "Qos Traffic Profiler Port range properties." - }, - "RadiusServer": { - "type": "object", - "properties": { - "radiusServerAddress": { - "type": "string", - "description": "The address of this radius server." - }, - "radiusServerScore": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The initial score assigned to this radius server." - }, - "radiusServerSecret": { - "type": "string", - "description": "The secret used for this radius server." - } - }, - "required": [ - "radiusServerAddress" - ], - "description": "Radius Server Settings." - }, - "RetentionPolicyParameters": { - "type": "object", - "properties": { - "days": { - "oneOf": [ - { - "type": "integer", - "default": "0" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Number of days to retain flow log records." - }, - "enabled": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable retention." - } - }, - "description": "Parameters that define the retention policy for flow log." - }, - "Route": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Route resource." - }, - "RouteFilterPropertiesFormat": { - "type": "object", - "properties": { - "rules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RouteFilterRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of RouteFilterRules contained within a route filter." - } - }, - "description": "Route Filter Resource." - }, - "RouteFilterRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "description": "Route Filter Rule Resource." - }, - "RouteFilterRulePropertiesFormat": { - "type": "object", - "properties": { - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The access type of the rule." - }, - "routeFilterRuleType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Community" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The rule type of the rule." - }, - "communities": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']." - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "description": "Route Filter Rule Resource." - }, - "routeFilters_routeFilterRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeFilterRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route filter rule." - }, - "location": { - "type": "string", - "description": "Resource location." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeFilters/routeFilterRules" - }, - "RoutePropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The destination CIDR to which the route applies." - }, - "nextHopType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of Azure hop the packet should be sent to." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance." - }, - "hasBgpOverride": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM." - } - }, - "required": [ - "addressPrefix", - "nextHopType" - ], - "description": "Route resource." - }, - "RouteTablePropertiesFormat": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Route" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Collection of routes contained within a route table." - }, - "disableBgpRoutePropagation": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether to disable the routes learned by BGP on that route table. True means disable." - } - }, - "description": "Route Table resource." - }, - "routeTables_routes_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routes" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the route." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/routeTables/routes" - }, - "RoutingConfiguration": { - "type": "object", - "properties": { - "associatedRouteTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The resource id RouteTable associated with this RoutingConfiguration." - }, - "propagatedRouteTables": { - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The list of RouteTables to advertise the routes to." - }, - "vnetRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - } - }, - "description": "Routing Configuration indicating the associated and propagated route tables for this connection." - }, - "SecurityPartnerProviderPropertiesFormat": { - "type": "object", - "properties": { - "securityProviderName": { - "oneOf": [ - { - "type": "string", - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The security provider name." - }, - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The virtualHub to which the Security Partner Provider belongs." - } - }, - "description": "Properties of the Security Partner Provider." - }, - "SecurityRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the security rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Network security rule." - }, - "SecurityRulePropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "protocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Network protocol this rule applies to." - }, - "sourcePortRange": { - "type": "string", - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "destinationPortRange": { - "type": "string", - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports." - }, - "sourceAddressPrefix": { - "type": "string", - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from." - }, - "sourceAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The CIDR or source IP ranges." - }, - "sourceApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as source." - }, - "destinationAddressPrefix": { - "type": "string", - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used." - }, - "destinationAddressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination address prefixes. CIDR or destination IP ranges." - }, - "destinationApplicationSecurityGroups": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The application security group specified as destination." - }, - "sourcePortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The source port ranges." - }, - "destinationPortRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The destination port ranges." - }, - "access": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Allow", - "Deny" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The network traffic is allowed or denied." - }, - "priority": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule." - }, - "direction": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Inbound", - "Outbound" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic." - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "description": "Security rule resource." - }, - "ServiceDelegationPropertiesFormat": { - "type": "object", - "properties": { - "serviceName": { - "type": "string", - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)." - } - }, - "description": "Properties of a service delegation." - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "serviceEndpointPolicyDefinitions" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - }, - "ServiceEndpointPolicyDefinition": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the service endpoint policy definition." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "Service Endpoint policy definitions." - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "type": "object", - "properties": { - "description": { - "type": "string", - "description": "A description for this rule. Restricted to 140 chars." - }, - "service": { - "type": "string", - "description": "Service endpoint name." - }, - "serviceResources": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of service resources." - } - }, - "description": "Service Endpoint policy definition resource." - }, - "ServiceEndpointPolicyPropertiesFormat": { - "type": "object", - "properties": { - "serviceEndpointPolicyDefinitions": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of service endpoint policy definitions of the service endpoint policy." - } - }, - "description": "Service Endpoint Policy resource." - }, - "ServiceEndpointPropertiesFormat": { - "type": "object", - "properties": { - "service": { - "type": "string", - "description": "The type of the endpoint service." - }, - "locations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of locations." - } - }, - "description": "The service endpoint properties." - }, - "StaticRoute": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the StaticRoute that is unique within a VnetRoute." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all address prefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "The ip address of the next hop." - } - }, - "description": "List of all Static Routes." - }, - "Subnet": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Subnet in a virtual network resource." - }, - "SubnetPropertiesFormat": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "The address prefix for the subnet." - }, - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of address prefixes for the subnet." - }, - "networkSecurityGroup": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the NetworkSecurityGroup resource." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the RouteTable resource." - }, - "natGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Nat gateway associated with this subnet." - }, - "serviceEndpoints": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoints." - }, - "serviceEndpointPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of service endpoint policies." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this subnet." - }, - "delegations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Delegation" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "An array of references to the delegations on the subnet." - }, - "privateEndpointNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private end point in the subnet." - }, - "privateLinkServiceNetworkPolicies": { - "type": "string", - "description": "Enable or Disable apply network policies on private link service in the subnet." - } - }, - "required": [ - "addressPrefix" - ], - "description": "Properties of the subnet." - }, - "SubResource": { - "type": "object", - "properties": { - "id": { - "type": "string", - "description": "Resource ID." - } - }, - "required": [ - "id" - ], - "description": "Reference to another subresource." - }, - "TrafficAnalyticsConfigurationProperties": { - "type": "object", - "properties": { - "enabled": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to enable/disable traffic analytics." - }, - "workspaceId": { - "type": "string", - "description": "The resource guid of the attached workspace." - }, - "workspaceRegion": { - "type": "string", - "description": "The location of the attached workspace." - }, - "workspaceResourceId": { - "type": "string", - "description": "Resource Id of the attached workspace." - }, - "trafficAnalyticsInterval": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficAnalyticsProperties": { - "type": "object", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Parameters that define the configuration of traffic analytics." - } - }, - "description": "Parameters that define the configuration of traffic analytics." - }, - "TrafficSelectorPolicy": { - "type": "object", - "properties": { - "localAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of local address spaces in CIDR format." - }, - "remoteAddressRanges": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A collection of remote address spaces in CIDR format." - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "description": "An traffic selector policy for a virtual network gateway connection." - }, - "VirtualApplianceSiteProperties": { - "type": "object", - "properties": { - "addressPrefix": { - "type": "string", - "description": "Address Prefix." - }, - "o365Policy": { - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Office 365 Policy." - } - }, - "description": "Properties of the rule group." - }, - "VirtualApplianceSkuProperties": { - "type": "object", - "properties": { - "vendor": { - "type": "string", - "description": "Virtual Appliance Vendor." - }, - "bundledScaleUnit": { - "type": "string", - "description": "Virtual Appliance Scale Unit." - }, - "marketPlaceVersion": { - "type": "string", - "description": "Virtual Appliance Version." - } - }, - "description": "Network Virtual Appliance Sku Properties." - }, - "VirtualHubProperties": { - "type": "object", - "properties": { - "virtualWan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualWAN to which the VirtualHub belongs." - }, - "vpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VpnGateway associated with this VirtualHub." - }, - "p2SVpnGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The P2SVpnGateway associated with this VirtualHub." - }, - "expressRouteGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The expressRouteGateway associated with this VirtualHub." - }, - "azureFirewall": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The azureFirewall associated with this VirtualHub." - }, - "securityPartnerProvider": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The securityPartnerProvider associated with this VirtualHub." - }, - "addressPrefix": { - "type": "string", - "description": "Address-prefix for this VirtualHub." - }, - "routeTable": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routeTable associated with this virtual hub." - }, - "securityProviderName": { - "type": "string", - "description": "The Security Provider name." - }, - "virtualHubRouteTableV2s": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all virtual hub route table v2s associated with this VirtualHub." - }, - "sku": { - "type": "string", - "description": "The sku of this VirtualHub." - }, - "routingState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Provisioned", - "Provisioning", - "Failed" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing state." - }, - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - }, - "allowBranchToBranchTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Flag to control transit for VirtualRouter hub." - } - }, - "description": "Parameters for VirtualHub." - }, - "VirtualHubRoute": { - "type": "object", - "properties": { - "addressPrefixes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all addressPrefixes." - }, - "nextHopIpAddress": { - "type": "string", - "description": "NextHop ip address." - } - }, - "description": "VirtualHub route." - }, - "VirtualHubRouteTable": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - } - }, - "description": "VirtualHub route table." - }, - "VirtualHubRouteTableV2": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VirtualHubRouteTableV2 Resource." - }, - "VirtualHubRouteTableV2Properties": { - "type": "object", - "properties": { - "routes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all routes." - }, - "attachedConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all connections attached to this route table v2." - } - }, - "description": "Parameters for VirtualHubRouteTableV2." - }, - "VirtualHubRouteV2": { - "type": "object", - "properties": { - "destinationType": { - "type": "string", - "description": "The type of destinations." - }, - "destinations": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all destinations." - }, - "nextHopType": { - "type": "string", - "description": "The type of next hops." - }, - "nextHops": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "NextHops ip address." - } - }, - "description": "VirtualHubRouteTableV2 route." - }, - "virtualHubs_bgpConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "bgpConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Bgp connections." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/bgpConnections" - }, - "virtualHubs_hubRouteTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubRouteTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the RouteTable resource." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubRouteTables" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "hubVirtualNetworkConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the hub virtual network connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - }, - "virtualHubs_ipConfigurations_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "ipConfigurations" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Hub IPConfigurations." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/ipConfigurations" - }, - "virtualHubs_routeTables_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "routeTables" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual hub route table v2." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualHubs/routeTables" - }, - "VirtualNetworkBgpCommunities": { - "type": "object", - "properties": { - "virtualNetworkCommunity": { - "type": "string", - "description": "The BGP community associated with the virtual network." - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "type": "object", - "properties": { - "authorizationKey": { - "type": "string", - "description": "The authorizationKey." - }, - "virtualNetworkGateway1": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "virtualNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to virtual network gateway resource." - }, - "localNetworkGateway2": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to local network gateway resource." - }, - "connectionType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway connection type." - }, - "connectionProtocol": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The routing weight." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dead peer detection timeout of this connection in seconds." - }, - "connectionMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The connection mode for this connection." - }, - "sharedKey": { - "type": "string", - "description": "The IPSec shared key." - }, - "peer": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to peerings resource." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use private local Azure IP for the connection." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "expressRouteGatewayBypass": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bypass ExpressRoute Gateway for data forwarding." - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "description": "VirtualNetworkGatewayConnection properties." - }, - "VirtualNetworkGatewayIPConfiguration": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network gateway ip configuration." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "IP configuration for virtual network gateway." - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "type": "object", - "properties": { - "privateIPAllocationMethod": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address allocation method." - }, - "subnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the subnet resource." - }, - "publicIPAddress": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the public IP resource." - } - }, - "description": "Properties of VirtualNetworkGatewayIPConfiguration." - }, - "VirtualNetworkGatewayPropertiesFormat": { - "type": "object", - "properties": { - "ipConfigurations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "IP configurations for virtual network gateway." - }, - "gatewayType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway", - "HyperNet" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "PolicyBased", - "RouteBased" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The type of this virtual network gateway." - }, - "vpnGatewayGeneration": { - "oneOf": [ - { - "type": "string", - "enum": [ - "None", - "Generation1", - "Generation2" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether BGP is enabled for this virtual network gateway or not." - }, - "enablePrivateIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether private IP needs to be enabled on this gateway for connections or not." - }, - "activeActive": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "ActiveActive flag." - }, - "gatewayDefaultSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting." - }, - "sku": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway." - }, - "vpnClientConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Virtual network gateway's BGP speaker settings." - }, - "customRoutes": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient." - }, - "enableDnsForwarding": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether dns forwarding is enabled or not." - }, - "vNetExtendedLocationResourceId": { - "type": "string", - "description": "MAS FIJI customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet." - }, - "virtualNetworkExtendedLocation": { - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The extended location of type local virtual network gateway." - } - }, - "description": "VirtualNetworkGateway properties." - }, - "VirtualNetworkGatewaySku": { - "type": "object", - "properties": { - "name": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU name." - }, - "tier": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Gateway SKU tier." - } - }, - "description": "VirtualNetworkGatewaySku details." - }, - "VirtualNetworkPeering": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "name" - ], - "description": "Peerings in a virtual network resource." - }, - "VirtualNetworkPeeringPropertiesFormat": { - "type": "object", - "properties": { - "allowVirtualNetworkAccess": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space." - }, - "allowForwardedTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network." - }, - "allowGatewayTransit": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If gateway links can be used in remote virtual networking to link to this virtual network." - }, - "useRemoteGateways": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway." - }, - "remoteVirtualNetwork": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering)." - }, - "remoteAddressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network address space." - }, - "remoteBgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the remote virtual network's Bgp Communities." - }, - "peeringState": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The status of the virtual network peering." - } - }, - "required": [ - "remoteVirtualNetwork" - ], - "description": "Properties of the virtual network peering." - }, - "VirtualNetworkPropertiesFormat": { - "type": "object", - "properties": { - "addressSpace": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets." - }, - "dhcpOptions": { - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network." - }, - "subnets": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/Subnet" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of subnets in a Virtual Network." - }, - "virtualNetworkPeerings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "A list of peerings in a Virtual Network." - }, - "enableDdosProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource." - }, - "enableVmProtection": { - "oneOf": [ - { - "type": "boolean", - "default": false - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network." - }, - "ddosProtectionPlan": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The DDoS protection plan associated with the virtual network." - }, - "bgpCommunities": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET." - }, - "ipAllocations": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/SubResource" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Array of IpAllocation which reference this VNET." - } - }, - "required": [ - "addressSpace" - ], - "description": "Properties of the virtual network." - }, - "virtualNetworks_subnets_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "subnets" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the subnet." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/subnets" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "virtualNetworkPeerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the virtual network peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - }, - "VirtualNetworkTapPropertiesFormat": { - "type": "object", - "properties": { - "destinationNetworkInterfaceIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP Address of the collector nic that will receive the tap." - }, - "destinationLoadBalancerFrontEndIPConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap." - }, - "destinationPort": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VXLAN destination port that will receive the tapped traffic." - } - }, - "description": "Virtual Network Tap properties." - }, - "VirtualRouterPeeringProperties": { - "type": "object", - "properties": { - "peerAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Peer ASN." - }, - "peerIp": { - "type": "string", - "description": "Peer IP." - } - }, - "description": "Properties of the rule group." - }, - "VirtualRouterPropertiesFormat": { - "type": "object", - "properties": { - "virtualRouterAsn": { - "oneOf": [ - { - "type": "integer", - "minimum": 0, - "maximum": 4294967295 - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter ASN." - }, - "virtualRouterIps": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VirtualRouter IPs." - }, - "hostedSubnet": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Subnet on which VirtualRouter is hosted." - }, - "hostedGateway": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Gateway on which VirtualRouter is hosted." - } - }, - "description": "Virtual Router definition." - }, - "virtualRouters_peerings_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "peerings" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The properties of the Virtual Router Peering." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/virtualRouters/peerings" - }, - "VirtualWanProperties": { - "type": "object", - "properties": { - "disableVpnEncryption": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Vpn encryption to be disabled or not." - }, - "allowBranchToBranchTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if branch to branch traffic is allowed." - }, - "allowVnetToVnetTraffic": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "True if Vnet to Vnet traffic is allowed." - }, - "office365LocalBreakoutCategory": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Optimize", - "OptimizeAndAllow", - "All", - "None" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The office local breakout category." - }, - "type": { - "type": "string", - "description": "The type of the VirtualWAN." - } - }, - "description": "Parameters for VirtualWAN." - }, - "VnetRoute": { - "type": "object", - "properties": { - "staticRoutes": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/StaticRoute" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all Static Routes." - } - }, - "description": "List of routes that control routing from VirtualHub into a virtual network connection." - }, - "VpnClientConfiguration": { - "type": "object", - "properties": { - "vpnClientAddressPool": { - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The reference to the address space resource which represents Address space for P2S VpnClient." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRootCertificate for virtual network gateway." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientRevokedCertificate for Virtual network gateway." - }, - "vpnClientProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientProtocols for Virtual network gateway." - }, - "vpnAuthenticationTypes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN authentication types for the virtual network gateway.." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection." - }, - "radiusServers": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/RadiusServer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The radiusServers property for multiple radius server configuration." - }, - "aadTenant": { - "type": "string", - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadAudience": { - "type": "string", - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - }, - "aadIssuer": { - "type": "string", - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication." - } - }, - "description": "VpnClientConfiguration for P2S client." - }, - "VpnClientRevokedCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client revoked certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VPN client revoked certificate of virtual network gateway." - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "type": "object", - "properties": { - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of virtual network gateway." - }, - "VpnClientRootCertificate": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the vpn client root certificate." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "required": [ - "properties" - ], - "description": "VPN client root certificate of virtual network gateway." - }, - "VpnClientRootCertificatePropertiesFormat": { - "type": "object", - "properties": { - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "required": [ - "publicCertData" - ], - "description": "Properties of SSL certificates of application gateway." - }, - "VpnConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnConnection Resource." - }, - "VpnConnectionProperties": { - "type": "object", - "properties": { - "remoteVpnSite": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Id of the connected vpn site." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing weight for vpn connection." - }, - "dpdTimeoutSeconds": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "DPD timeout in seconds for vpn connection." - }, - "connectionStatus": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The connection status." - }, - "vpnConnectionProtocolType": { - "oneOf": [ - { - "type": "string", - "enum": [ - "IKEv2", - "IKEv1" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Expected bandwidth in MBPS." - }, - "sharedKey": { - "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "usePolicyBasedTrafficSelectors": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The IPSec Policies to be considered by this connection." - }, - "trafficSelectorPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Traffic Selector Policies to be considered by this connection." - }, - "enableRateLimiting": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." - }, - "enableInternetSecurity": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable internet security." - }, - "useLocalAzureIpAddress": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Use local azure ip to initiate connection." - }, - "vpnLinkConnections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn site link connections to the gateway." - }, - "routingConfiguration": { - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnGatewayNatRule": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VpnGateway NAT rule." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnGatewayNatRule Resource." - }, - "VpnGatewayNatRuleProperties": { - "type": "object", - "properties": { - "type": { - "type": "string", - "enum": [ - "Static", - "Dynamic" - ], - "description": "The type of NAT rule for VPN NAT." - }, - "mode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "EgressSnat", - "IngressSnat" - ] - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The Source NAT direction of a VPN NAT." - }, - "internalMappings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address internal mapping for NAT." - }, - "externalMappings": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The private IP address external mapping for NAT." - }, - "ipConfigurationId": { - "type": "string", - "description": "The IP Configuration ID this NAT rule applies to." - } - }, - "description": "Parameters for VpnGatewayNatRule." - }, - "VpnGatewayProperties": { - "type": "object", - "properties": { - "virtualHub": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The VirtualHub to which the gateway belongs." - }, - "connections": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnConnection" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all vpn connections to the gateway." - }, - "bgpSettings": { - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Local network gateway's BGP speaker settings." - }, - "vpnGatewayScaleUnit": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The scale unit for this vpn gateway." - }, - "isRoutingPreferenceInternet": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway." - }, - "natRules": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "List of all the nat Rules associated with the gateway." - } - }, - "description": "Parameters for VpnGateway." - }, - "vpnGateways_natRules_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "natRules" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VpnGateway NAT rule." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/natRules" - }, - "vpnGateways_vpnConnections_childResource": { - "type": "object", - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string", - "enum": [ - "vpnConnections" - ] - }, - "apiVersion": { - "type": "string", - "enum": [ - "2020-11-01" - ] - }, - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN connection." - } - }, - "required": [ - "name", - "type", - "apiVersion", - "properties" - ], - "description": "Microsoft.Network/vpnGateways/vpnConnections" - }, - "VpnLinkBgpSettings": { - "type": "object", - "properties": { - "asn": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The BGP speaker's ASN." - }, - "bgpPeeringAddress": { - "type": "string", - "description": "The BGP peering address and BGP identifier of this BGP speaker." - } - }, - "description": "BGP settings details for a link." - }, - "VpnLinkProviderProperties": { - "type": "object", - "properties": { - "linkProviderName": { - "type": "string", - "description": "Name of the link provider." - }, - "linkSpeedInMbps": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Link speed." - } - }, - "description": "List of properties of a link provider." - }, - "VpnNatRuleMapping": { - "type": "object", - "properties": { - "addressSpace": { - "type": "string", - "description": "Address space for Vpn NatRule mapping." - } - }, - "description": "Vpn NatRule mapping." - }, - "VpnServerConfigRadiusClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The Radius client root certificate thumbprint." - } - }, - "description": "Properties of the Radius client root certificate of VpnServerConfiguration." - }, - "VpnServerConfigRadiusServerRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of Radius Server root certificate of VpnServerConfiguration." - }, - "VpnServerConfigurationProperties": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The name of the VpnServerConfiguration that is unique within a resource group." - }, - "vpnProtocols": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "IkeV2", - "OpenVPN" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN protocols for the VpnServerConfiguration." - }, - "vpnAuthenticationTypes": { - "oneOf": [ - { - "type": "array", - "items": { - "type": "string", - "enum": [ - "Certificate", - "Radius", - "AAD" - ] - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN authentication types for the VpnServerConfiguration." - }, - "vpnClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client root certificate of VpnServerConfiguration." - }, - "vpnClientRevokedCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VPN client revoked certificate of VpnServerConfiguration." - }, - "radiusServerRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius Server root certificate of VpnServerConfiguration." - }, - "radiusClientRootCertificates": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Radius client root certificate of VpnServerConfiguration." - }, - "vpnClientIpsecPolicies": { - "oneOf": [ - { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "VpnClientIpsecPolicies for VpnServerConfiguration." - }, - "radiusServerAddress": { - "type": "string", - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection." - }, - "radiusServerSecret": { - "type": "string", - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection." - }, - "radiusServers": { + "rules": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/RadiusServer" - } - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Multiple Radius Server configuration for VpnServerConfiguration." - }, - "aadAuthenticationParameters": { - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "The set of aad vpn authentication parameters." - } - }, - "description": "Parameters for VpnServerConfiguration." - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "thumbprint": { - "type": "string", - "description": "The revoked VPN client certificate thumbprint." - } - }, - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration." - }, - "VpnServerConfigVpnClientRootCertificate": { - "type": "object", - "properties": { - "name": { - "type": "string", - "description": "The certificate name." - }, - "publicCertData": { - "type": "string", - "description": "The certificate public data." - } - }, - "description": "Properties of VPN client root certificate of VpnServerConfiguration." - }, - "VpnSiteLink": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site link." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLink Resource." - }, - "VpnSiteLinkConnection": { - "type": "object", - "properties": { - "properties": { - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Properties of the VPN site link connection." - }, - "name": { - "type": "string", - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource." - } - }, - "description": "VpnSiteLinkConnection Resource." - }, - "VpnSiteLinkConnectionProperties": { - "type": "object", - "properties": { - "vpnSiteLink": { - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Id of the connected vpn site link." - }, - "routingWeight": { - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "Routing weight for vpn connection." - }, - "vpnLinkConnectionMode": { - "oneOf": [ - { - "type": "string", - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ] + "$ref": "#/definitions/CustomRule" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Vpn link connection mode." - }, - "connectionStatus": { + "description": "List of rules" + } + }, + "description": "Defines contents of custom rules" + }, + "ManagedRuleExclusion": { + "type": "object", + "properties": { + "matchVariable": { "oneOf": [ { "type": "string", "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" + "RequestHeaderNames", + "RequestCookieNames", + "QueryStringArgNames", + "RequestBodyPostArgNames", + "RequestBodyJsonArgNames" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The connection status." + "description": "The variable type to be excluded." + }, + "selector": { + "type": "string", + "description": "Selector value for which elements in the collection this exclusion applies to." }, - "vpnConnectionProtocolType": { + "selectorMatchOperator": { "oneOf": [ { "type": "string", "enum": [ - "IKEv2", - "IKEv1" + "Equals", + "Contains", + "StartsWith", + "EndsWith", + "EqualsAny" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Connection protocol used for this connection." - }, - "connectionBandwidth": { + "description": "Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to." + } + }, + "required": [ + "matchVariable", + "selector", + "selectorMatchOperator" + ], + "description": "Exclude variables from managed rule evaluation." + }, + "ManagedRuleGroupOverride": { + "type": "object", + "properties": { + "exclusions": { "oneOf": [ { - "type": "integer" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Expected bandwidth in MBPS." + "description": "Describes the exclusions that are applied to all rules in the group." }, - "sharedKey": { + "ruleGroupName": { "type": "string", - "description": "SharedKey for the vpn connection." - }, - "enableBgp": { - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ], - "description": "EnableBgp flag." + "description": "Describes the managed rule group to override." }, - "usePolicyBasedTrafficSelectors": { + "rules": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleOverride" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Enable policy-based traffic selectors." - }, - "ipsecPolicies": { + "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled." + } + }, + "required": [ + "ruleGroupName" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleOverride": { + "type": "object", + "properties": { + "action": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/IpsecPolicy" - } + "type": "string", + "enum": [ + "Allow", + "Block", + "Log", + "Redirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The IPSec Policies to be considered by this connection." + "description": "Describes the override action to be applied when rule matches." }, - "enableRateLimiting": { + "enabledState": { "oneOf": [ { - "type": "boolean" + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "EnableBgp flag." + "description": "Describes if the managed rule is in enabled or disabled state. Defaults to Disabled if not specified." }, - "useLocalAzureIpAddress": { + "exclusions": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleExclusion" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Use local azure ip to initiate connection." + "description": "Describes the exclusions that are applied to this specific rule." }, - "ingressNatRules": { + "ruleId": { + "type": "string", + "description": "Identifier for the managed rule." + } + }, + "required": [ + "ruleId" + ], + "description": "Defines a managed rule group override setting." + }, + "ManagedRuleSet": { + "type": "object", + "properties": { + "exclusions": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/ManagedRuleExclusion" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of ingress NatRules." + "description": "Describes the exclusions that are applied to all rules in the set." }, - "egressNatRules": { + "ruleGroupOverrides": { "oneOf": [ { "type": "array", "items": { - "$ref": "#/definitions/SubResource" + "$ref": "#/definitions/ManagedRuleGroupOverride" } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of egress NatRules." - } - }, - "description": "Parameters for VpnConnection." - }, - "VpnSiteLinkProperties": { - "type": "object", - "properties": { - "linkProperties": { + "description": "Defines the rule group overrides to apply to the rule set." + }, + "ruleSetAction": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkProviderProperties" + "type": "string", + "enum": [ + "Block", + "Log", + "Redirect" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } - ], - "description": "The link provider properties." + ] }, - "ipAddress": { + "ruleSetType": { "type": "string", - "description": "The ip-address for the vpn-site-link." + "description": "Defines the rule set type to use." }, - "fqdn": { + "ruleSetVersion": { "type": "string", - "description": "FQDN of vpn-site-link." - }, - "bgpProperties": { + "description": "Defines the version of the rule set to use." + } + }, + "required": [ + "ruleSetType", + "ruleSetVersion" + ], + "description": "Defines a managed rule set." + }, + "ManagedRuleSetList": { + "type": "object", + "properties": { + "managedRuleSets": { "oneOf": [ { - "$ref": "#/definitions/VpnLinkBgpSettings" + "type": "array", + "items": { + "$ref": "#/definitions/ManagedRuleSet" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "List of rule sets." } }, - "description": "Parameters for VpnSite." + "description": "Defines the list of managed rule sets for the policy." }, - "VpnSiteProperties": { + "MatchCondition": { "type": "object", "properties": { - "virtualWan": { + "matchValue": { "oneOf": [ { - "$ref": "#/definitions/SubResource" + "type": "array", + "items": { + "type": "string" + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The VirtualWAN to which the vpnSite belongs." + "description": "List of possible match values." }, - "deviceProperties": { + "matchVariable": { "oneOf": [ { - "$ref": "#/definitions/DeviceProperties" + "type": "string", + "enum": [ + "RemoteAddr", + "RequestMethod", + "QueryString", + "PostArgs", + "RequestUri", + "RequestHeader", + "RequestBody", + "Cookies", + "SocketAddr" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The device properties." - }, - "ipAddress": { - "type": "string", - "description": "The ip-address for the vpn-site." + "description": "Request variable to compare with." }, - "siteKey": { - "type": "string", - "description": "The key for vpn-site that can be used for connections." - }, - "addressSpace": { + "negateCondition": { "oneOf": [ { - "$ref": "#/definitions/AddressSpace" + "type": "boolean" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The AddressSpace that contains an array of IP address ranges." + "description": "Describes if the result of this condition should be negated." }, - "bgpProperties": { + "operator": { "oneOf": [ { - "$ref": "#/definitions/BgpSettings" + "type": "string", + "enum": [ + "Any", + "IPMatch", + "GeoMatch", + "Equal", + "Contains", + "LessThan", + "GreaterThan", + "LessThanOrEqual", + "GreaterThanOrEqual", + "BeginsWith", + "EndsWith", + "RegEx" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The set of bgp properties." + "description": "Comparison type to use for matching with the variable value." }, - "isSecuritySite": { + "selector": { + "type": "string", + "description": "Match against a specific key from the QueryString, PostArgs, RequestHeader or Cookies variables. Default is null." + }, + "transforms": { "oneOf": [ { - "type": "boolean" + "type": "array", + "items": { + "type": "string", + "enum": [ + "Lowercase", + "Uppercase", + "Trim", + "UrlDecode", + "UrlEncode", + "RemoveNulls" + ] + } }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "IsSecuritySite flag." - }, - "vpnSiteLinks": { + "description": "List of transforms." + } + }, + "required": [ + "matchValue", + "matchVariable", + "operator" + ], + "description": "Define a match condition." + }, + "PolicySettings": { + "type": "object", + "properties": { + "customBlockResponseBody": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/VpnSiteLink" - } + "type": "string", + "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of all vpn site links." + "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding." }, - "o365Policy": { + "customBlockResponseStatusCode": { "oneOf": [ { - "$ref": "#/definitions/O365PolicyProperties" + "type": "integer" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Office365 Policy." - } - }, - "description": "Parameters for VpnSite." - }, - "WebApplicationFirewallCustomRule": { - "type": "object", - "properties": { - "name": { - "type": "string", - "maxLength": 128, - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource." + "description": "If the action type is block, customer can override the response status code." }, - "priority": { + "enabledState": { "oneOf": [ { - "type": "integer" + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value." + "description": "Describes if the policy is in enabled or disabled state. Defaults to Enabled if not specified." }, - "ruleType": { + "mode": { "oneOf": [ { "type": "string", "enum": [ - "MatchRule", - "Invalid" + "Prevention", + "Detection" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The rule type." + "description": "Describes if it is in detection mode or prevention mode at policy level." }, - "matchConditions": { + "redirectUrl": { + "type": "string", + "description": "If action type is redirect, this field represents redirect URL for the client." + }, + "requestBodyCheck": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/MatchCondition" - } + "type": "string", + "enum": [ + "Disabled", + "Enabled" + ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "List of match conditions." - }, - "action": { + "description": "Describes if policy managed rules will inspect the request body content." + } + }, + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." + }, + "Sku": { + "type": "object", + "properties": { + "name": { "oneOf": [ { "type": "string", "enum": [ - "Allow", - "Block", - "Log" + "Classic_AzureFrontDoor", + "Standard_AzureFrontDoor", + "Premium_AzureFrontDoor" ] }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Type of Actions." + "description": "Name of the pricing tier." } }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "description": "Defines contents of a web application rule." + "description": "The pricing tier of the web application firewall policy." }, - "WebApplicationFirewallPolicyPropertiesFormat": { + "WebApplicationFirewallPolicyProperties": { "type": "object", "properties": { - "policySettings": { + "customRules": { "oneOf": [ { - "$ref": "#/definitions/PolicySettings" + "$ref": "#/definitions/CustomRuleList" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The PolicySettings for policy." + "description": "Defines contents of custom rules" }, - "customRules": { + "managedRules": { "oneOf": [ { - "type": "array", - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - } + "$ref": "#/definitions/ManagedRuleSetList" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "The custom rules inside the policy." + "description": "Defines the list of managed rule sets for the policy." }, - "managedRules": { + "policySettings": { "oneOf": [ { - "$ref": "#/definitions/ManagedRulesDefinition" + "$ref": "#/definitions/PolicySettings" }, { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } ], - "description": "Describes the managedRules structure." + "description": "Defines top-level WebApplicationFirewallPolicy configuration settings." } }, - "required": [ - "managedRules" - ], "description": "Defines web application firewall policy properties." } }