Package-level declarations

Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.

The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.

Specifies the Active Directory account type for Azure Storage.

The action of virtual network rule.

Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.

The access tier of a storage blob.

The type of a storage blob to be created.

Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.

Specifies the default action of allow or deny when no other rules match.

Default share permission for users using Kerberos authentication if RBAC role is not assigned.

Indicates the directory service used. Note that this enum may be extended in the future.

Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.

The authentication protocol that is used for the file share. Can only be specified when creating a share.

The provider for the encryption scope. Possible values (case-insensitive): Microsoft.Storage, Microsoft.KeyVault.

The state of the encryption scope. Possible values (case-insensitive): Enabled, Disabled.

The SAS Expiration Action defines the action to be performed when sasPolicy.sasExpirationPeriod is violated. The 'Log' action can be used for audit purposes and the 'Block' action can be used to block and deny the usage of SAS tokens that do not adhere to the sas policy expiration period.

The type of the extended location.

This is a required field, it specifies the format for the inventory files.

The protocol permitted for a request made with the account SAS.

The identity type.

Run interval unit of task execution. This is a required field when ExecutionTrigger.properties.type is 'OnSchedule'; this property should not be present when ExecutionTrigger.properties.type is 'RunOnce'

The valid value is Inventory

The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault

Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.

Required. Indicates the type of storage account.

Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.

Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.

Name of the policy. The valid value is AccessTimeTracking. This field is currently read only

This is a required field. This field specifies the scope of the inventory created either at the blob or container level.

The signed permissions for the service SAS. Possible values include: Read (r), Write (w), Delete (d), List (l), Add (a), Create (c), Update (u) and Process (p).

Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.

Specifies whether data in the container may be accessed publicly and the level of access.

Allow, disallow, or let Network Security Perimeter configuration to evaluate public network access to Storage Account. Value is optional but if passed in, must be 'Enabled', 'Disabled' or 'SecuredByPerimeter'.

The property is for NFS share only. The default is NoRootSquash.

Routing Choice defines the kind of network routing opted by the user.

The valid value is Lifecycle

This is a required field. This field is used to schedule an inventory formation.

The signed services accessible with the account SAS. Possible values include: Blob (b), Queue (q), Table (t), File (f).

Access tier for specific share. GpV2 account can choose between TransactionOptimized (default), Hot, and Cool. FileStorage account can choose Premium.

The signed services accessible with the service SAS. Possible values include: Blob (b), Container (c), File (f), Share (s).

The signed resource types that are accessible with the account SAS. Service (s): Access to service-level APIs; Container (c): Access to container-level APIs; Object (o): Access to object-level APIs for blobs, queue messages, table entities, and files.

The SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType.

Gets the state of virtual network rule.

The trigger type of the storage task assignment execution