Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. resources
  5. DeploymentStackAtManagementGroup
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.resources.DeploymentStackAtManagementGroup

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-azure-native

    Deployment stack object.

    Uses Azure REST API version 2024-03-01. In version 2.x of the Azure Native provider, it used API version 2022-08-01-preview.

    Other available API versions: 2022-08-01-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native resources [ApiVersion]. See the version guide for details.

    Example Usage

    DeploymentStacksManagementGroupCreateOrUpdate

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var deploymentStackAtManagementGroup = new AzureNative.Resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroup", new()
    {
        ActionOnUnmanage = new AzureNative.Resources.Inputs.ActionOnUnmanageArgs
        {
            ManagementGroups = AzureNative.Resources.DeploymentStacksDeleteDetachEnum.Detach,
            ResourceGroups = AzureNative.Resources.DeploymentStacksDeleteDetachEnum.Delete,
            Resources = AzureNative.Resources.DeploymentStacksDeleteDetachEnum.Delete,
        },
        DenySettings = new AzureNative.Resources.Inputs.DenySettingsArgs
        {
            ApplyToChildScopes = false,
            ExcludedActions = new[]
            {
                "action",
            },
            ExcludedPrincipals = new[]
            {
                "principal",
            },
            Mode = AzureNative.Resources.DenySettingsMode.DenyDelete,
        },
        DeploymentStackName = "simpleDeploymentStack",
        Location = "eastus",
        ManagementGroupId = "myMg",
        Parameters = 
        {
            { "parameter1", new AzureNative.Resources.Inputs.DeploymentParameterArgs
            {
                Value = "a string",
            } },
        },
        Tags = 
        {
            { "tagkey", "tagVal" },
        },
    });

});

    package main

import (
	resources "github.com/pulumi/pulumi-azure-native-sdk/resources/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := resources.NewDeploymentStackAtManagementGroup(ctx, "deploymentStackAtManagementGroup", &resources.DeploymentStackAtManagementGroupArgs{
			ActionOnUnmanage: &resources.ActionOnUnmanageArgs{
				ManagementGroups: pulumi.String(resources.DeploymentStacksDeleteDetachEnumDetach),
				ResourceGroups:   pulumi.String(resources.DeploymentStacksDeleteDetachEnumDelete),
				Resources:        pulumi.String(resources.DeploymentStacksDeleteDetachEnumDelete),
			},
			DenySettings: &resources.DenySettingsArgs{
				ApplyToChildScopes: pulumi.Bool(false),
				ExcludedActions: pulumi.StringArray{
					pulumi.String("action"),
				},
				ExcludedPrincipals: pulumi.StringArray{
					pulumi.String("principal"),
				},
				Mode: pulumi.String(resources.DenySettingsModeDenyDelete),
			},
			DeploymentStackName: pulumi.String("simpleDeploymentStack"),
			Location:            pulumi.String("eastus"),
			ManagementGroupId:   pulumi.String("myMg"),
			Parameters: resources.DeploymentParameterMap{
				"parameter1": &resources.DeploymentParameterArgs{
					Value: pulumi.Any("a string"),
				},
			},
			Tags: pulumi.StringMap{
				"tagkey": pulumi.String("tagVal"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.resources.DeploymentStackAtManagementGroup;
import com.pulumi.azurenative.resources.DeploymentStackAtManagementGroupArgs;
import com.pulumi.azurenative.resources.inputs.ActionOnUnmanageArgs;
import com.pulumi.azurenative.resources.inputs.DenySettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var deploymentStackAtManagementGroup = new DeploymentStackAtManagementGroup("deploymentStackAtManagementGroup", DeploymentStackAtManagementGroupArgs.builder()
            .actionOnUnmanage(ActionOnUnmanageArgs.builder()
                .managementGroups("detach")
                .resourceGroups("delete")
                .resources("delete")
                .build())
            .denySettings(DenySettingsArgs.builder()
                .applyToChildScopes(false)
                .excludedActions("action")
                .excludedPrincipals("principal")
                .mode("denyDelete")
                .build())
            .deploymentStackName("simpleDeploymentStack")
            .location("eastus")
            .managementGroupId("myMg")
            .parameters(Map.of("parameter1", DeploymentParameterArgs.builder()
                .value("a string")
                .build()))
            .tags(Map.of("tagkey", "tagVal"))
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const deploymentStackAtManagementGroup = new azure_native.resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroup", {
    actionOnUnmanage: {
        managementGroups: azure_native.resources.DeploymentStacksDeleteDetachEnum.Detach,
        resourceGroups: azure_native.resources.DeploymentStacksDeleteDetachEnum.Delete,
        resources: azure_native.resources.DeploymentStacksDeleteDetachEnum.Delete,
    },
    denySettings: {
        applyToChildScopes: false,
        excludedActions: ["action"],
        excludedPrincipals: ["principal"],
        mode: azure_native.resources.DenySettingsMode.DenyDelete,
    },
    deploymentStackName: "simpleDeploymentStack",
    location: "eastus",
    managementGroupId: "myMg",
    parameters: {
        parameter1: {
            value: "a string",
        },
    },
    tags: {
        tagkey: "tagVal",
    },
});

    import pulumi
import pulumi_azure_native as azure_native

deployment_stack_at_management_group = azure_native.resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroup",
    action_on_unmanage={
        "management_groups": azure_native.resources.DeploymentStacksDeleteDetachEnum.DETACH,
        "resource_groups": azure_native.resources.DeploymentStacksDeleteDetachEnum.DELETE,
        "resources": azure_native.resources.DeploymentStacksDeleteDetachEnum.DELETE,
    },
    deny_settings={
        "apply_to_child_scopes": False,
        "excluded_actions": ["action"],
        "excluded_principals": ["principal"],
        "mode": azure_native.resources.DenySettingsMode.DENY_DELETE,
    },
    deployment_stack_name="simpleDeploymentStack",
    location="eastus",
    management_group_id="myMg",
    parameters={
        "parameter1": {
            "value": "a string",
        },
    },
    tags={
        "tagkey": "tagVal",
    })

    resources:
  deploymentStackAtManagementGroup:
    type: azure-native:resources:DeploymentStackAtManagementGroup
    properties:
      actionOnUnmanage:
        managementGroups: detach
        resourceGroups: delete
        resources: delete
      denySettings:
        applyToChildScopes: false
        excludedActions:
          - action
        excludedPrincipals:
          - principal
        mode: denyDelete
      deploymentStackName: simpleDeploymentStack
      location: eastus
      managementGroupId: myMg
      parameters:
        parameter1:
          value: a string
      tags:
        tagkey: tagVal

    Create DeploymentStackAtManagementGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DeploymentStackAtManagementGroup(name: string, args: DeploymentStackAtManagementGroupArgs, opts?: CustomResourceOptions);
    @overload
def DeploymentStackAtManagementGroup(resource_name: str,
                                     args: DeploymentStackAtManagementGroupArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def DeploymentStackAtManagementGroup(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     deny_settings: Optional[DenySettingsArgs] = None,
                                     management_group_id: Optional[str] = None,
                                     action_on_unmanage: Optional[ActionOnUnmanageArgs] = None,
                                     description: Optional[str] = None,
                                     deployment_scope: Optional[str] = None,
                                     deployment_stack_name: Optional[str] = None,
                                     debug_setting: Optional[DeploymentStacksDebugSettingArgs] = None,
                                     location: Optional[str] = None,
                                     bypass_stack_out_of_sync_error: Optional[bool] = None,
                                     parameters: Optional[Mapping[str, DeploymentParameterArgs]] = None,
                                     parameters_link: Optional[DeploymentStacksParametersLinkArgs] = None,
                                     tags: Optional[Mapping[str, str]] = None,
                                     template: Optional[Any] = None,
                                     template_link: Optional[DeploymentStacksTemplateLinkArgs] = None)
    func NewDeploymentStackAtManagementGroup(ctx *Context, name string, args DeploymentStackAtManagementGroupArgs, opts ...ResourceOption) (*DeploymentStackAtManagementGroup, error)
    public DeploymentStackAtManagementGroup(string name, DeploymentStackAtManagementGroupArgs args, CustomResourceOptions? opts = null)
    public DeploymentStackAtManagementGroup(String name, DeploymentStackAtManagementGroupArgs args)
public DeploymentStackAtManagementGroup(String name, DeploymentStackAtManagementGroupArgs args, CustomResourceOptions options)

    type: azure-native:resources:DeploymentStackAtManagementGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DeploymentStackAtManagementGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DeploymentStackAtManagementGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DeploymentStackAtManagementGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DeploymentStackAtManagementGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DeploymentStackAtManagementGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var deploymentStackAtManagementGroupResource = new AzureNative.Resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroupResource", new()
{
    DenySettings = new AzureNative.Resources.Inputs.DenySettingsArgs
    {
        Mode = "string",
        ApplyToChildScopes = false,
        ExcludedActions = new[]
        {
            "string",
        },
        ExcludedPrincipals = new[]
        {
            "string",
        },
    },
    ManagementGroupId = "string",
    ActionOnUnmanage = new AzureNative.Resources.Inputs.ActionOnUnmanageArgs
    {
        Resources = "string",
        ManagementGroups = "string",
        ResourceGroups = "string",
    },
    Description = "string",
    DeploymentScope = "string",
    DeploymentStackName = "string",
    DebugSetting = new AzureNative.Resources.Inputs.DeploymentStacksDebugSettingArgs
    {
        DetailLevel = "string",
    },
    Location = "string",
    BypassStackOutOfSyncError = false,
    Parameters = 
    {
        { "string", new AzureNative.Resources.Inputs.DeploymentParameterArgs
        {
            Reference = new AzureNative.Resources.Inputs.KeyVaultParameterReferenceArgs
            {
                KeyVault = new AzureNative.Resources.Inputs.KeyVaultReferenceArgs
                {
                    Id = "string",
                },
                SecretName = "string",
                SecretVersion = "string",
            },
            Type = "string",
            Value = "any",
        } },
    },
    ParametersLink = new AzureNative.Resources.Inputs.DeploymentStacksParametersLinkArgs
    {
        Uri = "string",
        ContentVersion = "string",
    },
    Tags = 
    {
        { "string", "string" },
    },
    Template = "any",
    TemplateLink = new AzureNative.Resources.Inputs.DeploymentStacksTemplateLinkArgs
    {
        ContentVersion = "string",
        Id = "string",
        QueryString = "string",
        RelativePath = "string",
        Uri = "string",
    },
});

    example, err := resources.NewDeploymentStackAtManagementGroup(ctx, "deploymentStackAtManagementGroupResource", &resources.DeploymentStackAtManagementGroupArgs{
	DenySettings: &resources.DenySettingsArgs{
		Mode:               pulumi.String("string"),
		ApplyToChildScopes: pulumi.Bool(false),
		ExcludedActions: pulumi.StringArray{
			pulumi.String("string"),
		},
		ExcludedPrincipals: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	ManagementGroupId: pulumi.String("string"),
	ActionOnUnmanage: &resources.ActionOnUnmanageArgs{
		Resources:        pulumi.String("string"),
		ManagementGroups: pulumi.String("string"),
		ResourceGroups:   pulumi.String("string"),
	},
	Description:         pulumi.String("string"),
	DeploymentScope:     pulumi.String("string"),
	DeploymentStackName: pulumi.String("string"),
	DebugSetting: &resources.DeploymentStacksDebugSettingArgs{
		DetailLevel: pulumi.String("string"),
	},
	Location:                  pulumi.String("string"),
	BypassStackOutOfSyncError: pulumi.Bool(false),
	Parameters: resources.DeploymentParameterMap{
		"string": &resources.DeploymentParameterArgs{
			Reference: &resources.KeyVaultParameterReferenceArgs{
				KeyVault: &resources.KeyVaultReferenceArgs{
					Id: pulumi.String("string"),
				},
				SecretName:    pulumi.String("string"),
				SecretVersion: pulumi.String("string"),
			},
			Type:  pulumi.String("string"),
			Value: pulumi.Any("any"),
		},
	},
	ParametersLink: &resources.DeploymentStacksParametersLinkArgs{
		Uri:            pulumi.String("string"),
		ContentVersion: pulumi.String("string"),
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Template: pulumi.Any("any"),
	TemplateLink: &resources.DeploymentStacksTemplateLinkArgs{
		ContentVersion: pulumi.String("string"),
		Id:             pulumi.String("string"),
		QueryString:    pulumi.String("string"),
		RelativePath:   pulumi.String("string"),
		Uri:            pulumi.String("string"),
	},
})

    var deploymentStackAtManagementGroupResource = new DeploymentStackAtManagementGroup("deploymentStackAtManagementGroupResource", DeploymentStackAtManagementGroupArgs.builder()
    .denySettings(DenySettingsArgs.builder()
        .mode("string")
        .applyToChildScopes(false)
        .excludedActions("string")
        .excludedPrincipals("string")
        .build())
    .managementGroupId("string")
    .actionOnUnmanage(ActionOnUnmanageArgs.builder()
        .resources("string")
        .managementGroups("string")
        .resourceGroups("string")
        .build())
    .description("string")
    .deploymentScope("string")
    .deploymentStackName("string")
    .debugSetting(DeploymentStacksDebugSettingArgs.builder()
        .detailLevel("string")
        .build())
    .location("string")
    .bypassStackOutOfSyncError(false)
    .parameters(Map.of("string", Map.ofEntries(
        Map.entry("reference", Map.ofEntries(
            Map.entry("keyVault", Map.of("id", "string")),
            Map.entry("secretName", "string"),
            Map.entry("secretVersion", "string")
        )),
        Map.entry("type", "string"),
        Map.entry("value", "any")
    )))
    .parametersLink(DeploymentStacksParametersLinkArgs.builder()
        .uri("string")
        .contentVersion("string")
        .build())
    .tags(Map.of("string", "string"))
    .template("any")
    .templateLink(DeploymentStacksTemplateLinkArgs.builder()
        .contentVersion("string")
        .id("string")
        .queryString("string")
        .relativePath("string")
        .uri("string")
        .build())
    .build());

    deployment_stack_at_management_group_resource = azure_native.resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroupResource",
    deny_settings={
        "mode": "string",
        "apply_to_child_scopes": False,
        "excluded_actions": ["string"],
        "excluded_principals": ["string"],
    },
    management_group_id="string",
    action_on_unmanage={
        "resources": "string",
        "management_groups": "string",
        "resource_groups": "string",
    },
    description="string",
    deployment_scope="string",
    deployment_stack_name="string",
    debug_setting={
        "detail_level": "string",
    },
    location="string",
    bypass_stack_out_of_sync_error=False,
    parameters={
        "string": {
            "reference": {
                "key_vault": {
                    "id": "string",
                },
                "secret_name": "string",
                "secret_version": "string",
            },
            "type": "string",
            "value": "any",
        },
    },
    parameters_link={
        "uri": "string",
        "content_version": "string",
    },
    tags={
        "string": "string",
    },
    template="any",
    template_link={
        "content_version": "string",
        "id": "string",
        "query_string": "string",
        "relative_path": "string",
        "uri": "string",
    })

    const deploymentStackAtManagementGroupResource = new azure_native.resources.DeploymentStackAtManagementGroup("deploymentStackAtManagementGroupResource", {
    denySettings: {
        mode: "string",
        applyToChildScopes: false,
        excludedActions: ["string"],
        excludedPrincipals: ["string"],
    },
    managementGroupId: "string",
    actionOnUnmanage: {
        resources: "string",
        managementGroups: "string",
        resourceGroups: "string",
    },
    description: "string",
    deploymentScope: "string",
    deploymentStackName: "string",
    debugSetting: {
        detailLevel: "string",
    },
    location: "string",
    bypassStackOutOfSyncError: false,
    parameters: {
        string: {
            reference: {
                keyVault: {
                    id: "string",
                },
                secretName: "string",
                secretVersion: "string",
            },
            type: "string",
            value: "any",
        },
    },
    parametersLink: {
        uri: "string",
        contentVersion: "string",
    },
    tags: {
        string: "string",
    },
    template: "any",
    templateLink: {
        contentVersion: "string",
        id: "string",
        queryString: "string",
        relativePath: "string",
        uri: "string",
    },
});

    type: azure-native:resources:DeploymentStackAtManagementGroup
properties:
    actionOnUnmanage:
        managementGroups: string
        resourceGroups: string
        resources: string
    bypassStackOutOfSyncError: false
    debugSetting:
        detailLevel: string
    denySettings:
        applyToChildScopes: false
        excludedActions:
            - string
        excludedPrincipals:
            - string
        mode: string
    deploymentScope: string
    deploymentStackName: string
    description: string
    location: string
    managementGroupId: string
    parameters:
        string:
            reference:
                keyVault:
                    id: string
                secretName: string
                secretVersion: string
            type: string
            value: any
    parametersLink:
        contentVersion: string
        uri: string
    tags:
        string: string
    template: any
    templateLink:
        contentVersion: string
        id: string
        queryString: string
        relativePath: string
        uri: string

    DeploymentStackAtManagementGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DeploymentStackAtManagementGroup resource accepts the following input properties:

    ActionOnUnmanage Pulumi.AzureNative.Resources.Inputs.ActionOnUnmanage
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    DenySettings Pulumi.AzureNative.Resources.Inputs.DenySettings
    Defines how resources deployed by the stack are locked.
    ManagementGroupId string
    Management Group id.
    BypassStackOutOfSyncError bool
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    DebugSetting Pulumi.AzureNative.Resources.Inputs.DeploymentStacksDebugSetting
    The debug setting of the deployment.
    DeploymentScope string
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    DeploymentStackName string
    Name of the deployment stack.
    Description string
    Deployment stack description. Max length of 4096 characters.
    Location string
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    Parameters Dictionary<string, Pulumi.AzureNative.Resources.Inputs.DeploymentParameterArgs>
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    ParametersLink Pulumi.AzureNative.Resources.Inputs.DeploymentStacksParametersLink
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    Tags Dictionary<string, string>
    Deployment stack resource tags.
    Template object
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    TemplateLink Pulumi.AzureNative.Resources.Inputs.DeploymentStacksTemplateLink
    The URI of the template. Use either the templateLink property or the template property, but not both.
    ActionOnUnmanage ActionOnUnmanageArgs
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    DenySettings DenySettingsArgs
    Defines how resources deployed by the stack are locked.
    ManagementGroupId string
    Management Group id.
    BypassStackOutOfSyncError bool
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    DebugSetting DeploymentStacksDebugSettingArgs
    The debug setting of the deployment.
    DeploymentScope string
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    DeploymentStackName string
    Name of the deployment stack.
    Description string
    Deployment stack description. Max length of 4096 characters.
    Location string
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    Parameters map[string]DeploymentParameterArgs
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    ParametersLink DeploymentStacksParametersLinkArgs
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    Tags map[string]string
    Deployment stack resource tags.
    Template interface{}
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    TemplateLink DeploymentStacksTemplateLinkArgs
    The URI of the template. Use either the templateLink property or the template property, but not both.
    actionOnUnmanage ActionOnUnmanage
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    denySettings DenySettings
    Defines how resources deployed by the stack are locked.
    managementGroupId String
    Management Group id.
    bypassStackOutOfSyncError Boolean
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    debugSetting DeploymentStacksDebugSetting
    The debug setting of the deployment.
    deploymentScope String
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    deploymentStackName String
    Name of the deployment stack.
    description String
    Deployment stack description. Max length of 4096 characters.
    location String
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    parameters Map<String,DeploymentParameterArgs>
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    parametersLink DeploymentStacksParametersLink
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    tags Map<String,String>
    Deployment stack resource tags.
    template Object
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    templateLink DeploymentStacksTemplateLink
    The URI of the template. Use either the templateLink property or the template property, but not both.
    actionOnUnmanage ActionOnUnmanage
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    denySettings DenySettings
    Defines how resources deployed by the stack are locked.
    managementGroupId string
    Management Group id.
    bypassStackOutOfSyncError boolean
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    debugSetting DeploymentStacksDebugSetting
    The debug setting of the deployment.
    deploymentScope string
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    deploymentStackName string
    Name of the deployment stack.
    description string
    Deployment stack description. Max length of 4096 characters.
    location string
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    parameters {[key: string]: DeploymentParameterArgs}
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    parametersLink DeploymentStacksParametersLink
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    tags {[key: string]: string}
    Deployment stack resource tags.
    template any
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    templateLink DeploymentStacksTemplateLink
    The URI of the template. Use either the templateLink property or the template property, but not both.
    action_on_unmanage ActionOnUnmanageArgs
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    deny_settings DenySettingsArgs
    Defines how resources deployed by the stack are locked.
    management_group_id str
    Management Group id.
    bypass_stack_out_of_sync_error bool
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    debug_setting DeploymentStacksDebugSettingArgs
    The debug setting of the deployment.
    deployment_scope str
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    deployment_stack_name str
    Name of the deployment stack.
    description str
    Deployment stack description. Max length of 4096 characters.
    location str
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    parameters Mapping[str, DeploymentParameterArgs]
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    parameters_link DeploymentStacksParametersLinkArgs
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    tags Mapping[str, str]
    Deployment stack resource tags.
    template Any
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    template_link DeploymentStacksTemplateLinkArgs
    The URI of the template. Use either the templateLink property or the template property, but not both.
    actionOnUnmanage Property Map
    Defines the behavior of resources that are no longer managed after the Deployment stack is updated or deleted.
    denySettings Property Map
    Defines how resources deployed by the stack are locked.
    managementGroupId String
    Management Group id.
    bypassStackOutOfSyncError Boolean
    Flag to bypass service errors that indicate the stack resource list is not correctly synchronized.
    debugSetting Property Map
    The debug setting of the deployment.
    deploymentScope String
    The scope at which the initial deployment should be created. If a scope is not specified, it will default to the scope of the deployment stack. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroupId}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}').
    deploymentStackName String
    Name of the deployment stack.
    description String
    Deployment stack description. Max length of 4096 characters.
    location String
    The location of the Deployment stack. It cannot be changed after creation. It must be one of the supported Azure locations.
    parameters Map<Property Map>
    Name and value pairs that define the deployment parameters for the template. Use this element when providing the parameter values directly in the request, rather than linking to an existing parameter file. Use either the parametersLink property or the parameters property, but not both.
    parametersLink Property Map
    The URI of parameters file. Use this element to link to an existing parameters file. Use either the parametersLink property or the parameters property, but not both.
    tags Map<String>
    Deployment stack resource tags.
    template Any
    The template content. You use this element when you want to pass the template syntax directly in the request rather than link to an existing template. It can be a JObject or well-formed JSON string. Use either the templateLink property or the template property, but not both.
    templateLink Property Map
    The URI of the template. Use either the templateLink property or the template property, but not both.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DeploymentStackAtManagementGroup resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    CorrelationId string
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    DeletedResources List<Pulumi.AzureNative.Resources.Outputs.ResourceReferenceResponse>
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    DeploymentId string
    The resourceId of the deployment resource created by the deployment stack.
    DetachedResources List<Pulumi.AzureNative.Resources.Outputs.ResourceReferenceResponse>
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    Duration string
    The duration of the last successful Deployment stack update.
    FailedResources List<Pulumi.AzureNative.Resources.Outputs.ResourceReferenceExtendedResponse>
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of this resource.
    Outputs object
    The outputs of the deployment resource created by the deployment stack.
    ProvisioningState string
    State of the deployment stack.
    Resources List<Pulumi.AzureNative.Resources.Outputs.ManagedResourceReferenceResponse>
    An array of resources currently managed by the deployment stack.
    SystemData Pulumi.AzureNative.Resources.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    Type of this resource.
    Error Pulumi.AzureNative.Resources.Outputs.ErrorDetailResponse
    The error detail.
    AzureApiVersion string
    The Azure API version of the resource.
    CorrelationId string
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    DeletedResources []ResourceReferenceResponse
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    DeploymentId string
    The resourceId of the deployment resource created by the deployment stack.
    DetachedResources []ResourceReferenceResponse
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    Duration string
    The duration of the last successful Deployment stack update.
    FailedResources []ResourceReferenceExtendedResponse
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of this resource.
    Outputs interface{}
    The outputs of the deployment resource created by the deployment stack.
    ProvisioningState string
    State of the deployment stack.
    Resources []ManagedResourceReferenceResponse
    An array of resources currently managed by the deployment stack.
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    Type of this resource.
    Error ErrorDetailResponse
    The error detail.
    azureApiVersion String
    The Azure API version of the resource.
    correlationId String
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    deletedResources List<ResourceReferenceResponse>
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    deploymentId String
    The resourceId of the deployment resource created by the deployment stack.
    detachedResources List<ResourceReferenceResponse>
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    duration String
    The duration of the last successful Deployment stack update.
    failedResources List<ResourceReferenceExtendedResponse>
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of this resource.
    outputs Object
    The outputs of the deployment resource created by the deployment stack.
    provisioningState String
    State of the deployment stack.
    resources List<ManagedResourceReferenceResponse>
    An array of resources currently managed by the deployment stack.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    Type of this resource.
    error ErrorDetailResponse
    The error detail.
    azureApiVersion string
    The Azure API version of the resource.
    correlationId string
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    deletedResources ResourceReferenceResponse[]
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    deploymentId string
    The resourceId of the deployment resource created by the deployment stack.
    detachedResources ResourceReferenceResponse[]
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    duration string
    The duration of the last successful Deployment stack update.
    failedResources ResourceReferenceExtendedResponse[]
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Name of this resource.
    outputs any
    The outputs of the deployment resource created by the deployment stack.
    provisioningState string
    State of the deployment stack.
    resources ManagedResourceReferenceResponse[]
    An array of resources currently managed by the deployment stack.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    Type of this resource.
    error ErrorDetailResponse
    The error detail.
    azure_api_version str
    The Azure API version of the resource.
    correlation_id str
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    deleted_resources Sequence[ResourceReferenceResponse]
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    deployment_id str
    The resourceId of the deployment resource created by the deployment stack.
    detached_resources Sequence[ResourceReferenceResponse]
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    duration str
    The duration of the last successful Deployment stack update.
    failed_resources Sequence[ResourceReferenceExtendedResponse]
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Name of this resource.
    outputs Any
    The outputs of the deployment resource created by the deployment stack.
    provisioning_state str
    State of the deployment stack.
    resources Sequence[ManagedResourceReferenceResponse]
    An array of resources currently managed by the deployment stack.
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    Type of this resource.
    error ErrorDetailResponse
    The error detail.
    azureApiVersion String
    The Azure API version of the resource.
    correlationId String
    The correlation id of the last Deployment stack upsert or delete operation. It is in GUID format and is used for tracing.
    deletedResources List<Property Map>
    An array of resources that were deleted during the most recent Deployment stack update. Deleted means that the resource was removed from the template and relevant deletion operations were specified.
    deploymentId String
    The resourceId of the deployment resource created by the deployment stack.
    detachedResources List<Property Map>
    An array of resources that were detached during the most recent Deployment stack update. Detached means that the resource was removed from the template, but no relevant deletion operations were specified. So, the resource still exists while no longer being associated with the stack.
    duration String
    The duration of the last successful Deployment stack update.
    failedResources List<Property Map>
    An array of resources that failed to reach goal state during the most recent update. Each resourceId is accompanied by an error message.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of this resource.
    outputs Any
    The outputs of the deployment resource created by the deployment stack.
    provisioningState String
    State of the deployment stack.
    resources List<Property Map>
    An array of resources currently managed by the deployment stack.
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    Type of this resource.
    error Property Map
    The error detail.

    Supporting Types

    ActionOnUnmanage, ActionOnUnmanageArgs

    Resources string | Pulumi.AzureNative.Resources.DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ManagementGroups string | Pulumi.AzureNative.Resources.DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ResourceGroups string | Pulumi.AzureNative.Resources.DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    Resources string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ManagementGroups string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ResourceGroups string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources String | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups String | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups String | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups string | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources str | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    management_groups str | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resource_groups str | DeploymentStacksDeleteDetachEnum
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources String | "delete" | "detach"
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups String | "delete" | "detach"
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups String | "delete" | "detach"
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.

    ActionOnUnmanageResponse, ActionOnUnmanageResponseArgs

    Resources string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ManagementGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ResourceGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    Resources string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ManagementGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    ResourceGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups string
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources str
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    management_groups str
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resource_groups str
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resources String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    managementGroups String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.
    resourceGroups String
    Specifies an action for a newly unmanaged resource. Delete will attempt to delete the resource from Azure. Detach will leave the resource in it's current state.

    DenySettings, DenySettingsArgs

    Mode string | Pulumi.AzureNative.Resources.DenySettingsMode
    denySettings Mode that defines denied actions.
    ApplyToChildScopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    ExcludedActions List<string>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    ExcludedPrincipals List<string>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    Mode string | DenySettingsMode
    denySettings Mode that defines denied actions.
    ApplyToChildScopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    ExcludedActions []string
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    ExcludedPrincipals []string
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode String | DenySettingsMode
    denySettings Mode that defines denied actions.
    applyToChildScopes Boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions List<String>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals List<String>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode string | DenySettingsMode
    denySettings Mode that defines denied actions.
    applyToChildScopes boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions string[]
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals string[]
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode str | DenySettingsMode
    denySettings Mode that defines denied actions.
    apply_to_child_scopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excluded_actions Sequence[str]
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excluded_principals Sequence[str]
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode String | "denyDelete" | "denyWriteAndDelete" | "none"
    denySettings Mode that defines denied actions.
    applyToChildScopes Boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions List<String>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals List<String>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.

    DenySettingsMode, DenySettingsModeArgs

    DenyDelete
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    DenyWriteAndDelete
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    None
    noneNo denyAssignments have been applied.
    DenySettingsModeDenyDelete
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    DenySettingsModeDenyWriteAndDelete
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    DenySettingsModeNone
    noneNo denyAssignments have been applied.
    DenyDelete
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    DenyWriteAndDelete
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    None
    noneNo denyAssignments have been applied.
    DenyDelete
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    DenyWriteAndDelete
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    None
    noneNo denyAssignments have been applied.
    DENY_DELETE
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    DENY_WRITE_AND_DELETE
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    NONE
    noneNo denyAssignments have been applied.
    "denyDelete"
    denyDeleteAuthorized users are able to read and modify the resources, but cannot delete.
    "denyWriteAndDelete"
    denyWriteAndDeleteAuthorized users can read from a resource, but cannot modify or delete it.
    "none"
    noneNo denyAssignments have been applied.

    DenySettingsResponse, DenySettingsResponseArgs

    Mode string
    denySettings Mode that defines denied actions.
    ApplyToChildScopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    ExcludedActions List<string>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    ExcludedPrincipals List<string>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    Mode string
    denySettings Mode that defines denied actions.
    ApplyToChildScopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    ExcludedActions []string
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    ExcludedPrincipals []string
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode String
    denySettings Mode that defines denied actions.
    applyToChildScopes Boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions List<String>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals List<String>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode string
    denySettings Mode that defines denied actions.
    applyToChildScopes boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions string[]
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals string[]
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode str
    denySettings Mode that defines denied actions.
    apply_to_child_scopes bool
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excluded_actions Sequence[str]
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excluded_principals Sequence[str]
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
    mode String
    denySettings Mode that defines denied actions.
    applyToChildScopes Boolean
    DenySettings will be applied to child resource scopes of every managed resource with a deny assignment.
    excludedActions List<String>
    List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
    excludedPrincipals List<String>
    List of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.

    DeploymentParameter, DeploymentParameterArgs

    Reference Pulumi.AzureNative.Resources.Inputs.KeyVaultParameterReference
    Azure Key Vault parameter reference.
    Type string
    Type of the value.
    Value object
    Input value to the parameter.
    Reference KeyVaultParameterReference
    Azure Key Vault parameter reference.
    Type string
    Type of the value.
    Value interface{}
    Input value to the parameter.
    reference KeyVaultParameterReference
    Azure Key Vault parameter reference.
    type String
    Type of the value.
    value Object
    Input value to the parameter.
    reference KeyVaultParameterReference
    Azure Key Vault parameter reference.
    type string
    Type of the value.
    value any
    Input value to the parameter.
    reference KeyVaultParameterReference
    Azure Key Vault parameter reference.
    type str
    Type of the value.
    value Any
    Input value to the parameter.
    reference Property Map
    Azure Key Vault parameter reference.
    type String
    Type of the value.
    value Any
    Input value to the parameter.

    DeploymentParameterResponse, DeploymentParameterResponseArgs

    Reference Pulumi.AzureNative.Resources.Inputs.KeyVaultParameterReferenceResponse
    Azure Key Vault parameter reference.
    Type string
    Type of the value.
    Value object
    Input value to the parameter.
    Reference KeyVaultParameterReferenceResponse
    Azure Key Vault parameter reference.
    Type string
    Type of the value.
    Value interface{}
    Input value to the parameter.
    reference KeyVaultParameterReferenceResponse
    Azure Key Vault parameter reference.
    type String
    Type of the value.
    value Object
    Input value to the parameter.
    reference KeyVaultParameterReferenceResponse
    Azure Key Vault parameter reference.
    type string
    Type of the value.
    value any
    Input value to the parameter.
    reference KeyVaultParameterReferenceResponse
    Azure Key Vault parameter reference.
    type str
    Type of the value.
    value Any
    Input value to the parameter.
    reference Property Map
    Azure Key Vault parameter reference.
    type String
    Type of the value.
    value Any
    Input value to the parameter.

    DeploymentStacksDebugSetting, DeploymentStacksDebugSettingArgs

    DetailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    DetailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel String
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detail_level str
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel String
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.

    DeploymentStacksDebugSettingResponse, DeploymentStacksDebugSettingResponseArgs

    DetailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    DetailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel String
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel string
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detail_level str
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.
    detailLevel String
    Specifies the type of information to log for debugging. The permitted values are none, requestContent, responseContent, or both requestContent and responseContent separated by a comma. The default is none. When setting this value, carefully consider the type of information that is being passed in during deployment. By logging information about the request or response, sensitive data that is retrieved through the deployment operations could potentially be exposed.

    DeploymentStacksDeleteDetachEnum, DeploymentStacksDeleteDetachEnumArgs

    Delete
    delete
    Detach
    detach
    DeploymentStacksDeleteDetachEnumDelete
    delete
    DeploymentStacksDeleteDetachEnumDetach
    detach
    Delete
    delete
    Detach
    detach
    Delete
    delete
    Detach
    detach
    DELETE
    delete
    DETACH
    detach
    "delete"
    delete
    "detach"
    detach
    Uri string
    The URI of the parameters file.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    Uri string
    The URI of the parameters file.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    uri String
    The URI of the parameters file.
    contentVersion String
    If included, must match the ContentVersion in the template.
    uri string
    The URI of the parameters file.
    contentVersion string
    If included, must match the ContentVersion in the template.
    uri str
    The URI of the parameters file.
    content_version str
    If included, must match the ContentVersion in the template.
    uri String
    The URI of the parameters file.
    contentVersion String
    If included, must match the ContentVersion in the template.

    DeploymentStacksParametersLinkResponse, DeploymentStacksParametersLinkResponseArgs

    Uri string
    The URI of the parameters file.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    Uri string
    The URI of the parameters file.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    uri String
    The URI of the parameters file.
    contentVersion String
    If included, must match the ContentVersion in the template.
    uri string
    The URI of the parameters file.
    contentVersion string
    If included, must match the ContentVersion in the template.
    uri str
    The URI of the parameters file.
    content_version str
    If included, must match the ContentVersion in the template.
    uri String
    The URI of the parameters file.
    contentVersion String
    If included, must match the ContentVersion in the template.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    Id string
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    QueryString string
    The query string (for example, a SAS token) to be used with the templateLink URI.
    RelativePath string
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    Uri string
    The URI of the template to deploy. Use either the uri or id property, but not both.
    ContentVersion string
    If included, must match the ContentVersion in the template.
    Id string
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    QueryString string
    The query string (for example, a SAS token) to be used with the templateLink URI.
    RelativePath string
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    Uri string
    The URI of the template to deploy. Use either the uri or id property, but not both.
    contentVersion String
    If included, must match the ContentVersion in the template.
    id String
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    queryString String
    The query string (for example, a SAS token) to be used with the templateLink URI.
    relativePath String
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    uri String
    The URI of the template to deploy. Use either the uri or id property, but not both.
    contentVersion string
    If included, must match the ContentVersion in the template.
    id string
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    queryString string
    The query string (for example, a SAS token) to be used with the templateLink URI.
    relativePath string
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    uri string
    The URI of the template to deploy. Use either the uri or id property, but not both.
    content_version str
    If included, must match the ContentVersion in the template.
    id str
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    query_string str
    The query string (for example, a SAS token) to be used with the templateLink URI.
    relative_path str
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    uri str
    The URI of the template to deploy. Use either the uri or id property, but not both.
    contentVersion String
    If included, must match the ContentVersion in the template.
    id String
    The resourceId of a Template Spec. Use either the id or uri property, but not both.
    queryString String
    The query string (for example, a SAS token) to be used with the templateLink URI.
    relativePath String
    The relativePath property can be used to deploy a linked template at a location relative to the parent. If the parent template was linked with a TemplateSpec, this will reference an artifact in the TemplateSpec. If the parent was linked with a URI, the child deployment will be a combination of the parent and relativePath URIs.
    uri String
    The URI of the template to deploy. Use either the uri or id property, but not both.

    ErrorAdditionalInfoResponse, ErrorAdditionalInfoResponseArgs

    Info object
    The additional info.
    Type string
    The additional info type.
    Info interface{}
    The additional info.
    Type string
    The additional info type.
    info Object
    The additional info.
    type String
    The additional info type.
    info any
    The additional info.
    type string
    The additional info type.
    info Any
    The additional info.
    type str
    The additional info type.
    info Any
    The additional info.
    type String
    The additional info type.

    ErrorDetailResponse, ErrorDetailResponseArgs

    AdditionalInfo List<Pulumi.AzureNative.Resources.Inputs.ErrorAdditionalInfoResponse>
    The error additional info.
    Code string
    The error code.
    Details List<Pulumi.AzureNative.Resources.Inputs.ErrorDetailResponse>
    The error details.
    Message string
    The error message.
    Target string
    The error target.
    AdditionalInfo []ErrorAdditionalInfoResponse
    The error additional info.
    Code string
    The error code.
    Details []ErrorDetailResponse
    The error details.
    Message string
    The error message.
    Target string
    The error target.
    additionalInfo List<ErrorAdditionalInfoResponse>
    The error additional info.
    code String
    The error code.
    details List<ErrorDetailResponse>
    The error details.
    message String
    The error message.
    target String
    The error target.
    additionalInfo ErrorAdditionalInfoResponse[]
    The error additional info.
    code string
    The error code.
    details ErrorDetailResponse[]
    The error details.
    message string
    The error message.
    target string
    The error target.
    additional_info Sequence[ErrorAdditionalInfoResponse]
    The error additional info.
    code str
    The error code.
    details Sequence[ErrorDetailResponse]
    The error details.
    message str
    The error message.
    target str
    The error target.
    additionalInfo List<Property Map>
    The error additional info.
    code String
    The error code.
    details List<Property Map>
    The error details.
    message String
    The error message.
    target String
    The error target.

    KeyVaultParameterReference, KeyVaultParameterReferenceArgs

    KeyVault Pulumi.AzureNative.Resources.Inputs.KeyVaultReference
    Azure Key Vault reference.
    SecretName string
    Azure Key Vault secret name.
    SecretVersion string
    Azure Key Vault secret version.
    KeyVault KeyVaultReference
    Azure Key Vault reference.
    SecretName string
    Azure Key Vault secret name.
    SecretVersion string
    Azure Key Vault secret version.
    keyVault KeyVaultReference
    Azure Key Vault reference.
    secretName String
    Azure Key Vault secret name.
    secretVersion String
    Azure Key Vault secret version.
    keyVault KeyVaultReference
    Azure Key Vault reference.
    secretName string
    Azure Key Vault secret name.
    secretVersion string
    Azure Key Vault secret version.
    key_vault KeyVaultReference
    Azure Key Vault reference.
    secret_name str
    Azure Key Vault secret name.
    secret_version str
    Azure Key Vault secret version.
    keyVault Property Map
    Azure Key Vault reference.
    secretName String
    Azure Key Vault secret name.
    secretVersion String
    Azure Key Vault secret version.

    KeyVaultParameterReferenceResponse, KeyVaultParameterReferenceResponseArgs

    KeyVault Pulumi.AzureNative.Resources.Inputs.KeyVaultReferenceResponse
    Azure Key Vault reference.
    SecretName string
    Azure Key Vault secret name.
    SecretVersion string
    Azure Key Vault secret version.
    KeyVault KeyVaultReferenceResponse
    Azure Key Vault reference.
    SecretName string
    Azure Key Vault secret name.
    SecretVersion string
    Azure Key Vault secret version.
    keyVault KeyVaultReferenceResponse
    Azure Key Vault reference.
    secretName String
    Azure Key Vault secret name.
    secretVersion String
    Azure Key Vault secret version.
    keyVault KeyVaultReferenceResponse
    Azure Key Vault reference.
    secretName string
    Azure Key Vault secret name.
    secretVersion string
    Azure Key Vault secret version.
    key_vault KeyVaultReferenceResponse
    Azure Key Vault reference.
    secret_name str
    Azure Key Vault secret name.
    secret_version str
    Azure Key Vault secret version.
    keyVault Property Map
    Azure Key Vault reference.
    secretName String
    Azure Key Vault secret name.
    secretVersion String
    Azure Key Vault secret version.

    KeyVaultReference, KeyVaultReferenceArgs

    Id string
    Azure Key Vault resourceId.
    Id string
    Azure Key Vault resourceId.
    id String
    Azure Key Vault resourceId.
    id string
    Azure Key Vault resourceId.
    id str
    Azure Key Vault resourceId.
    id String
    Azure Key Vault resourceId.

    KeyVaultReferenceResponse, KeyVaultReferenceResponseArgs

    Id string
    Azure Key Vault resourceId.
    Id string
    Azure Key Vault resourceId.
    id String
    Azure Key Vault resourceId.
    id string
    Azure Key Vault resourceId.
    id str
    Azure Key Vault resourceId.
    id String
    Azure Key Vault resourceId.

    ManagedResourceReferenceResponse, ManagedResourceReferenceResponseArgs

    Id string
    The resourceId of a resource managed by the deployment stack.
    DenyStatus string
    denyAssignment settings applied to the resource.
    Status string
    Current management state of the resource in the deployment stack.
    Id string
    The resourceId of a resource managed by the deployment stack.
    DenyStatus string
    denyAssignment settings applied to the resource.
    Status string
    Current management state of the resource in the deployment stack.
    id String
    The resourceId of a resource managed by the deployment stack.
    denyStatus String
    denyAssignment settings applied to the resource.
    status String
    Current management state of the resource in the deployment stack.
    id string
    The resourceId of a resource managed by the deployment stack.
    denyStatus string
    denyAssignment settings applied to the resource.
    status string
    Current management state of the resource in the deployment stack.
    id str
    The resourceId of a resource managed by the deployment stack.
    deny_status str
    denyAssignment settings applied to the resource.
    status str
    Current management state of the resource in the deployment stack.
    id String
    The resourceId of a resource managed by the deployment stack.
    denyStatus String
    denyAssignment settings applied to the resource.
    status String
    Current management state of the resource in the deployment stack.

    ResourceReferenceExtendedResponse, ResourceReferenceExtendedResponseArgs

    Id string
    The resourceId of a resource managed by the deployment stack.
    Error Pulumi.AzureNative.Resources.Inputs.ErrorDetailResponse
    The error detail.
    Id string
    The resourceId of a resource managed by the deployment stack.
    Error ErrorDetailResponse
    The error detail.
    id String
    The resourceId of a resource managed by the deployment stack.
    error ErrorDetailResponse
    The error detail.
    id string
    The resourceId of a resource managed by the deployment stack.
    error ErrorDetailResponse
    The error detail.
    id str
    The resourceId of a resource managed by the deployment stack.
    error ErrorDetailResponse
    The error detail.
    id String
    The resourceId of a resource managed by the deployment stack.
    error Property Map
    The error detail.

    ResourceReferenceResponse, ResourceReferenceResponseArgs

    Id string
    The resourceId of a resource managed by the deployment stack.
    Id string
    The resourceId of a resource managed by the deployment stack.
    id String
    The resourceId of a resource managed by the deployment stack.
    id string
    The resourceId of a resource managed by the deployment stack.
    id str
    The resourceId of a resource managed by the deployment stack.
    id String
    The resourceId of a resource managed by the deployment stack.

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:resources:DeploymentStackAtManagementGroup simpleDeploymentStack /providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Resources/deploymentStacks/{deploymentStackName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi
    pulumi/pulumi-azure-native