azure-resource-manager-schemas/schemas/2021-08-01/Microsoft.Compute.json

{
  "id": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Compute.json#",
  "title": "Microsoft.Compute",
  "description": "Microsoft Compute Resource Types",
  "$schema": "http://json-schema.org/draft-04/schema#",
  "resourceDefinitions": {
    "diskAccesses": {
      "description": "Microsoft.Compute/diskAccesses",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "extendedLocation": {
          "description": "The extended location where the disk access will be created. Extended location cannot be changed.",
          "oneOf": [
            {
              "$ref": "#/definitions/ExtendedLocation"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "location": {
          "description": "Resource location",
          "type": "string"
        },
        "name": {
          "description": "The name of the disk access resource that is being created. The name can't be changed after the disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters.",
          "type": "string"
        },
        "properties": {
          "oneOf": [
            {
              "$ref": "#/definitions/DiskAccessProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "resources": {
          "items": {
            "oneOf": [
              {
                "$ref": "#/definitions/diskAccesses_privateEndpointConnections_childResource"
              }
            ]
          },
          "type": "array"
        },
        "tags": {
          "description": "Resource tags",
          "oneOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "properties": {},
              "type": "object"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "Microsoft.Compute/diskAccesses"
          ],
          "type": "string"
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    },
    "diskAccesses_privateEndpointConnections": {
      "description": "Microsoft.Compute/diskAccesses/privateEndpointConnections",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "name": {
          "description": "The name of the private endpoint connection.",
          "type": "string"
        },
        "properties": {
          "description": "Resource properties.",
          "oneOf": [
            {
              "$ref": "#/definitions/PrivateEndpointConnectionProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "Microsoft.Compute/diskAccesses/privateEndpointConnections"
          ],
          "type": "string"
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    },
    "diskEncryptionSets": {
      "description": "Microsoft.Compute/diskEncryptionSets",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "identity": {
          "description": "The managed identity for the disk encryption set. It should be given permission on the key vault before it can be used to encrypt disks.",
          "oneOf": [
            {
              "$ref": "#/definitions/EncryptionSetIdentity"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "location": {
          "description": "Resource location",
          "type": "string"
        },
        "name": {
          "description": "The name of the disk encryption set that is being created. The name can't be changed after the disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters.",
          "type": "string"
        },
        "properties": {
          "oneOf": [
            {
              "$ref": "#/definitions/EncryptionSetProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "tags": {
          "description": "Resource tags",
          "oneOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "properties": {},
              "type": "object"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "Microsoft.Compute/diskEncryptionSets"
          ],
          "type": "string"
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    },
    "disks": {
      "description": "Microsoft.Compute/disks",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "extendedLocation": {
          "description": "The extended location where the disk will be created. Extended location cannot be changed.",
          "oneOf": [
            {
              "$ref": "#/definitions/ExtendedLocation"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "location": {
          "description": "Resource location",
          "type": "string"
        },
        "name": {
          "description": "The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters.",
          "type": "string"
        },
        "properties": {
          "description": "Disk resource properties.",
          "oneOf": [
            {
              "$ref": "#/definitions/DiskProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "sku": {
          "description": "The disks sku name. Can be Standard_LRS, Premium_LRS, StandardSSD_LRS, UltraSSD_LRS, Premium_ZRS, or StandardSSD_ZRS.",
          "oneOf": [
            {
              "$ref": "#/definitions/DiskSku"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "tags": {
          "description": "Resource tags",
          "oneOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "properties": {},
              "type": "object"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "Microsoft.Compute/disks"
          ],
          "type": "string"
        },
        "zones": {
          "description": "The Logical zone list for Disk.",
          "oneOf": [
            {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    },
    "snapshots": {
      "description": "Microsoft.Compute/snapshots",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "extendedLocation": {
          "description": "The extended location where the snapshot will be created. Extended location cannot be changed.",
          "oneOf": [
            {
              "$ref": "#/definitions/ExtendedLocation"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "location": {
          "description": "Resource location",
          "type": "string"
        },
        "name": {
          "description": "The name of the snapshot that is being created. The name can't be changed after the snapshot is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80 characters.",
          "type": "string"
        },
        "properties": {
          "description": "Snapshot resource properties.",
          "oneOf": [
            {
              "$ref": "#/definitions/SnapshotProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "sku": {
          "description": "The snapshots sku name. Can be Standard_LRS, Premium_LRS, or Standard_ZRS. This is an optional parameter for incremental snapshot and the default behavior is the SKU will be set to the same sku as the previous snapshot",
          "oneOf": [
            {
              "$ref": "#/definitions/SnapshotSku"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "tags": {
          "description": "Resource tags",
          "oneOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "properties": {},
              "type": "object"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "Microsoft.Compute/snapshots"
          ],
          "type": "string"
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    }
  },
  "definitions": {
    "CreationData": {
      "description": "Data used when creating a disk.",
      "properties": {
        "createOption": {
          "description": "This enumerates the possible sources of a disk's creation.",
          "oneOf": [
            {
              "enum": [
                "Empty",
                "Attach",
                "FromImage",
                "Import",
                "Copy",
                "Restore",
                "Upload",
                "CopyStart",
                "ImportSecure",
                "UploadPreparedSecure"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "galleryImageReference": {
          "description": "Required if creating from a Gallery Image. The id of the ImageDiskReference will be the ARM id of the shared galley image version from which to create a disk.",
          "oneOf": [
            {
              "$ref": "#/definitions/ImageDiskReference"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "imageReference": {
          "description": "Disk source information.",
          "oneOf": [
            {
              "$ref": "#/definitions/ImageDiskReference"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "logicalSectorSize": {
          "description": "Logical sector size in bytes for Ultra disks. Supported values are 512 ad 4096. 4096 is the default.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "securityDataUri": {
          "description": "If createOption is ImportSecure, this is the URI of a blob to be imported into VM guest state.",
          "type": "string"
        },
        "sourceResourceId": {
          "description": "If createOption is Copy, this is the ARM id of the source snapshot or disk.",
          "type": "string"
        },
        "sourceUri": {
          "description": "If createOption is Import, this is the URI of a blob to be imported into a managed disk.",
          "type": "string"
        },
        "storageAccountId": {
          "description": "Required if createOption is Import. The Azure Resource Manager identifier of the storage account containing the blob to import as a disk.",
          "type": "string"
        },
        "uploadSizeBytes": {
          "description": "If createOption is Upload, this is the size of the contents of the upload including the VHD footer. This value should be between 20972032 (20 MiB + 512 bytes for the VHD footer) and 35183298347520 bytes (32 TiB + 512 bytes for the VHD footer).",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "createOption"
      ],
      "type": "object"
    },
    "DiskAccessProperties": {
      "properties": {},
      "type": "object"
    },
    "DiskProperties": {
      "description": "Disk resource properties.",
      "properties": {
        "burstingEnabled": {
          "description": "Set to true to enable bursting beyond the provisioned performance target of the disk. Bursting is disabled by default. Does not apply to Ultra disks.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "completionPercent": {
          "description": "Percentage complete for the background copy when a resource is created via the CopyStart operation.",
          "oneOf": [
            {
              "type": "number"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "creationData": {
          "description": "Disk source information. CreationData information cannot be changed after the disk has been created.",
          "oneOf": [
            {
              "$ref": "#/definitions/CreationData"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskAccessId": {
          "description": "ARM id of the DiskAccess resource for using private endpoints on disks.",
          "type": "string"
        },
        "diskIOPSReadOnly": {
          "description": "The total number of IOPS that will be allowed across all VMs mounting the shared disk as ReadOnly. One operation can transfer between 4k and 256k bytes.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskIOPSReadWrite": {
          "description": "The number of IOPS allowed for this disk; only settable for UltraSSD disks. One operation can transfer between 4k and 256k bytes.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskMBpsReadOnly": {
          "description": "The total throughput (MBps) that will be allowed across all VMs mounting the shared disk as ReadOnly. MBps means millions of bytes per second - MB here uses the ISO notation, of powers of 10.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskMBpsReadWrite": {
          "description": "The bandwidth allowed for this disk; only settable for UltraSSD disks. MBps means millions of bytes per second - MB here uses the ISO notation, of powers of 10.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskSizeGB": {
          "description": "If creationData.createOption is Empty, this field is mandatory and it indicates the size of the disk to create. If this field is present for updates or creation with other options, it indicates a resize. Resizes are only allowed if the disk is not attached to a running VM, and can only increase the disk's size.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryption": {
          "description": "Encryption property can be used to encrypt data at rest with customer managed keys or platform managed keys.",
          "oneOf": [
            {
              "$ref": "#/definitions/Encryption"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryptionSettingsCollection": {
          "description": "Encryption settings collection used for Azure Disk Encryption, can contain multiple encryption settings per disk or snapshot.",
          "oneOf": [
            {
              "$ref": "#/definitions/EncryptionSettingsCollection"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "hyperVGeneration": {
          "description": "The hypervisor generation of the Virtual Machine. Applicable to OS disks only.",
          "oneOf": [
            {
              "enum": [
                "V1",
                "V2"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "maxShares": {
          "description": "The maximum number of VMs that can attach to the disk at the same time. Value greater than one indicates a disk that can be mounted on multiple VMs at the same time.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "networkAccessPolicy": {
          "description": "Policy for accessing the disk via network.",
          "oneOf": [
            {
              "enum": [
                "AllowAll",
                "AllowPrivate",
                "DenyAll"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "osType": {
          "description": "The Operating System type.",
          "oneOf": [
            {
              "enum": [
                "Windows",
                "Linux"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "publicNetworkAccess": {
          "description": "Policy for controlling export on the disk.",
          "oneOf": [
            {
              "enum": [
                "Enabled",
                "Disabled"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "purchasePlan": {
          "description": "Purchase plan information for the the image from which the OS disk was created. E.g. - {name: 2019-Datacenter, publisher: MicrosoftWindowsServer, product: WindowsServer}",
          "oneOf": [
            {
              "$ref": "#/definitions/PurchasePlan"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "securityProfile": {
          "description": "Contains the security related information for the resource.",
          "oneOf": [
            {
              "$ref": "#/definitions/DiskSecurityProfile"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "supportedCapabilities": {
          "description": "List of supported capabilities for the image from which the OS disk was created.",
          "oneOf": [
            {
              "$ref": "#/definitions/SupportedCapabilities"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "supportsHibernation": {
          "description": "Indicates the OS on a disk supports hibernation.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "tier": {
          "description": "Performance tier of the disk (e.g, P4, S10) as described here: https://azure.microsoft.com/en-us/pricing/details/managed-disks/. Does not apply to Ultra disks.",
          "type": "string"
        }
      },
      "required": [
        "creationData"
      ],
      "type": "object"
    },
    "DiskSecurityProfile": {
      "description": "Contains the security related information for the resource.",
      "properties": {
        "secureVMDiskEncryptionSetId": {
          "description": "ResourceId of the disk encryption set associated to Confidential VM supported disk encrypted with customer managed key",
          "type": "string"
        },
        "securityType": {
          "description": "Specifies the SecurityType of the VM. Applicable for OS disks only.",
          "oneOf": [
            {
              "enum": [
                "TrustedLaunch",
                "ConfidentialVM_VMGuestStateOnlyEncryptedWithPlatformKey",
                "ConfidentialVM_DiskEncryptedWithPlatformKey",
                "ConfidentialVM_DiskEncryptedWithCustomerKey"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "DiskSku": {
      "description": "The disks sku name. Can be Standard_LRS, Premium_LRS, StandardSSD_LRS, UltraSSD_LRS, Premium_ZRS, or StandardSSD_ZRS.",
      "properties": {
        "name": {
          "description": "The sku name.",
          "oneOf": [
            {
              "enum": [
                "Standard_LRS",
                "Premium_LRS",
                "StandardSSD_LRS",
                "UltraSSD_LRS",
                "Premium_ZRS",
                "StandardSSD_ZRS"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "Encryption": {
      "description": "Encryption at rest settings for disk or snapshot",
      "properties": {
        "diskEncryptionSetId": {
          "description": "ResourceId of the disk encryption set to use for enabling encryption at rest.",
          "type": "string"
        },
        "type": {
          "description": "The type of key used to encrypt the data of the disk.",
          "oneOf": [
            {
              "enum": [
                "EncryptionAtRestWithPlatformKey",
                "EncryptionAtRestWithCustomerKey",
                "EncryptionAtRestWithPlatformAndCustomerKeys"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "EncryptionSetIdentity": {
      "description": "The managed identity for the disk encryption set. It should be given permission on the key vault before it can be used to encrypt disks.",
      "properties": {
        "type": {
          "description": "The type of Managed Identity used by the DiskEncryptionSet. Only SystemAssigned is supported for new creations. Disk Encryption Sets can be updated with Identity type None during migration of subscription to a new Azure Active Directory tenant; it will cause the encrypted resources to lose access to the keys.",
          "oneOf": [
            {
              "enum": [
                "SystemAssigned",
                "None"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "EncryptionSetProperties": {
      "properties": {
        "activeKey": {
          "description": "The key vault key which is currently used by this disk encryption set.",
          "oneOf": [
            {
              "$ref": "#/definitions/KeyForDiskEncryptionSet"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryptionType": {
          "description": "The type of key used to encrypt the data of the disk.",
          "oneOf": [
            {
              "enum": [
                "EncryptionAtRestWithCustomerKey",
                "EncryptionAtRestWithPlatformAndCustomerKeys",
                "ConfidentialVmEncryptedWithCustomerKey"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "rotationToLatestKeyVersionEnabled": {
          "description": "Set this flag to true to enable auto-updating of this disk encryption set to the latest key version.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "EncryptionSettingsCollection": {
      "description": "Encryption settings for disk or snapshot",
      "properties": {
        "enabled": {
          "description": "Set this flag to true and provide DiskEncryptionKey and optional KeyEncryptionKey to enable encryption. Set this flag to false and remove DiskEncryptionKey and KeyEncryptionKey to disable encryption. If EncryptionSettings is null in the request object, the existing settings remain unchanged.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryptionSettings": {
          "description": "A collection of encryption settings, one for each disk volume.",
          "oneOf": [
            {
              "items": {
                "$ref": "#/definitions/EncryptionSettingsElement"
              },
              "type": "array"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryptionSettingsVersion": {
          "description": "Describes what type of encryption is used for the disks. Once this field is set, it cannot be overwritten. '1.0' corresponds to Azure Disk Encryption with AAD app.'1.1' corresponds to Azure Disk Encryption.",
          "type": "string"
        }
      },
      "required": [
        "enabled"
      ],
      "type": "object"
    },
    "EncryptionSettingsElement": {
      "description": "Encryption settings for one disk volume.",
      "properties": {
        "diskEncryptionKey": {
          "description": "Key Vault Secret Url and vault id of the disk encryption key",
          "oneOf": [
            {
              "$ref": "#/definitions/KeyVaultAndSecretReference"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "keyEncryptionKey": {
          "description": "Key Vault Key Url and vault id of the key encryption key. KeyEncryptionKey is optional and when provided is used to unwrap the disk encryption key.",
          "oneOf": [
            {
              "$ref": "#/definitions/KeyVaultAndKeyReference"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "ExtendedLocation": {
      "description": "The complex type of the extended location.",
      "properties": {
        "name": {
          "description": "The name of the extended location.",
          "type": "string"
        },
        "type": {
          "description": "The type of the extended location.",
          "oneOf": [
            {
              "enum": [
                "EdgeZone"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "ImageDiskReference": {
      "description": "The source image used for creating the disk.",
      "properties": {
        "id": {
          "description": "A relative uri containing either a Platform Image Repository or user image reference.",
          "type": "string"
        },
        "lun": {
          "description": "If the disk is created from an image's data disk, this is an index that indicates which of the data disks in the image to use. For OS disks, this field is null.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "id"
      ],
      "type": "object"
    },
    "KeyForDiskEncryptionSet": {
      "description": "Key Vault Key Url to be used for server side encryption of Managed Disks and Snapshots",
      "properties": {
        "keyUrl": {
          "description": "Fully versioned Key Url pointing to a key in KeyVault. Version segment of the Url is required regardless of rotationToLatestKeyVersionEnabled value.",
          "type": "string"
        },
        "sourceVault": {
          "description": "Resource id of the KeyVault containing the key or secret. This property is optional and cannot be used if the KeyVault subscription is not the same as the Disk Encryption Set subscription.",
          "oneOf": [
            {
              "$ref": "#/definitions/SourceVault"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "keyUrl"
      ],
      "type": "object"
    },
    "KeyVaultAndKeyReference": {
      "description": "Key Vault Key Url and vault id of KeK, KeK is optional and when provided is used to unwrap the encryptionKey",
      "properties": {
        "keyUrl": {
          "description": "Url pointing to a key or secret in KeyVault",
          "type": "string"
        },
        "sourceVault": {
          "description": "Resource id of the KeyVault containing the key or secret",
          "oneOf": [
            {
              "$ref": "#/definitions/SourceVault"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "sourceVault",
        "keyUrl"
      ],
      "type": "object"
    },
    "KeyVaultAndSecretReference": {
      "description": "Key Vault Secret Url and vault id of the encryption key ",
      "properties": {
        "secretUrl": {
          "description": "Url pointing to a key or secret in KeyVault",
          "type": "string"
        },
        "sourceVault": {
          "description": "Resource id of the KeyVault containing the key or secret",
          "oneOf": [
            {
              "$ref": "#/definitions/SourceVault"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "sourceVault",
        "secretUrl"
      ],
      "type": "object"
    },
    "PrivateEndpointConnectionProperties": {
      "description": "Properties of the PrivateEndpointConnectProperties.",
      "properties": {
        "privateLinkServiceConnectionState": {
          "description": "A collection of information about the state of the connection between DiskAccess and Virtual Network.",
          "oneOf": [
            {
              "$ref": "#/definitions/PrivateLinkServiceConnectionState"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "privateLinkServiceConnectionState"
      ],
      "type": "object"
    },
    "PrivateLinkServiceConnectionState": {
      "description": "A collection of information about the state of the connection between service consumer and provider.",
      "properties": {
        "actionsRequired": {
          "description": "A message indicating if changes on the service provider require any updates on the consumer.",
          "type": "string"
        },
        "description": {
          "description": "The reason for approval/rejection of the connection.",
          "type": "string"
        },
        "status": {
          "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.",
          "oneOf": [
            {
              "enum": [
                "Pending",
                "Approved",
                "Rejected"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "PurchasePlan": {
      "description": "Used for establishing the purchase context of any 3rd Party artifact through MarketPlace.",
      "properties": {
        "name": {
          "description": "The plan ID.",
          "type": "string"
        },
        "product": {
          "description": "Specifies the product of the image from the marketplace. This is the same value as Offer under the imageReference element.",
          "type": "string"
        },
        "promotionCode": {
          "description": "The Offer Promotion Code.",
          "type": "string"
        },
        "publisher": {
          "description": "The publisher ID.",
          "type": "string"
        }
      },
      "required": [
        "name",
        "publisher",
        "product"
      ],
      "type": "object"
    },
    "SnapshotProperties": {
      "description": "Snapshot resource properties.",
      "properties": {
        "completionPercent": {
          "description": "Percentage complete for the background copy when a resource is created via the CopyStart operation.",
          "oneOf": [
            {
              "type": "number"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "creationData": {
          "description": "Disk source information. CreationData information cannot be changed after the disk has been created.",
          "oneOf": [
            {
              "$ref": "#/definitions/CreationData"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "diskAccessId": {
          "description": "ARM id of the DiskAccess resource for using private endpoints on disks.",
          "type": "string"
        },
        "diskSizeGB": {
          "description": "If creationData.createOption is Empty, this field is mandatory and it indicates the size of the disk to create. If this field is present for updates or creation with other options, it indicates a resize. Resizes are only allowed if the disk is not attached to a running VM, and can only increase the disk's size.",
          "oneOf": [
            {
              "type": "integer"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryption": {
          "description": "Encryption property can be used to encrypt data at rest with customer managed keys or platform managed keys.",
          "oneOf": [
            {
              "$ref": "#/definitions/Encryption"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "encryptionSettingsCollection": {
          "description": "Encryption settings collection used be Azure Disk Encryption, can contain multiple encryption settings per disk or snapshot.",
          "oneOf": [
            {
              "$ref": "#/definitions/EncryptionSettingsCollection"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "hyperVGeneration": {
          "description": "The hypervisor generation of the Virtual Machine. Applicable to OS disks only.",
          "oneOf": [
            {
              "enum": [
                "V1",
                "V2"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "incremental": {
          "description": "Whether a snapshot is incremental. Incremental snapshots on the same disk occupy less space than full snapshots and can be diffed.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "networkAccessPolicy": {
          "description": "Policy for accessing the disk via network.",
          "oneOf": [
            {
              "enum": [
                "AllowAll",
                "AllowPrivate",
                "DenyAll"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "osType": {
          "description": "The Operating System type.",
          "oneOf": [
            {
              "enum": [
                "Windows",
                "Linux"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "publicNetworkAccess": {
          "description": "Policy for controlling export on the disk.",
          "oneOf": [
            {
              "enum": [
                "Enabled",
                "Disabled"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "purchasePlan": {
          "description": "Purchase plan information for the image from which the source disk for the snapshot was originally created.",
          "oneOf": [
            {
              "$ref": "#/definitions/PurchasePlan"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "securityProfile": {
          "description": "Contains the security related information for the resource.",
          "oneOf": [
            {
              "$ref": "#/definitions/DiskSecurityProfile"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "supportedCapabilities": {
          "description": "List of supported capabilities (like Accelerated Networking) for the image from which the source disk from the snapshot was originally created.",
          "oneOf": [
            {
              "$ref": "#/definitions/SupportedCapabilities"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "supportsHibernation": {
          "description": "Indicates the OS on a snapshot supports hibernation.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "required": [
        "creationData"
      ],
      "type": "object"
    },
    "SnapshotSku": {
      "description": "The snapshots sku name. Can be Standard_LRS, Premium_LRS, or Standard_ZRS. This is an optional parameter for incremental snapshot and the default behavior is the SKU will be set to the same sku as the previous snapshot",
      "properties": {
        "name": {
          "description": "The sku name.",
          "oneOf": [
            {
              "enum": [
                "Standard_LRS",
                "Premium_LRS",
                "Standard_ZRS"
              ],
              "type": "string"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "SourceVault": {
      "description": "The vault id is an Azure Resource Manager Resource id in the form /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.KeyVault/vaults/{vaultName}",
      "properties": {
        "id": {
          "description": "Resource Id",
          "type": "string"
        }
      },
      "type": "object"
    },
    "SupportedCapabilities": {
      "description": "List of supported capabilities (like accelerated networking) persisted on the disk resource for VM use.",
      "properties": {
        "acceleratedNetwork": {
          "description": "True if the image from which the OS disk is created supports accelerated networking.",
          "oneOf": [
            {
              "type": "boolean"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        }
      },
      "type": "object"
    },
    "diskAccesses_privateEndpointConnections_childResource": {
      "description": "Microsoft.Compute/diskAccesses/privateEndpointConnections",
      "properties": {
        "apiVersion": {
          "enum": [
            "2021-08-01"
          ],
          "type": "string"
        },
        "name": {
          "description": "The name of the private endpoint connection.",
          "type": "string"
        },
        "properties": {
          "description": "Resource properties.",
          "oneOf": [
            {
              "$ref": "#/definitions/PrivateEndpointConnectionProperties"
            },
            {
              "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
            }
          ]
        },
        "type": {
          "enum": [
            "privateEndpointConnections"
          ],
          "type": "string"
        }
      },
      "required": [
        "name",
        "properties",
        "apiVersion",
        "type"
      ],
      "type": "object"
    }
  }
}