1. Packages
  2. Azure Classic
  3. API Docs
  4. aifoundry
  5. Hub

We recommend using Azure Native.

Azure v6.28.0 published on Friday, Oct 3, 2025 by Pulumi
pulumi/pulumi-azure

azure.aifoundry.Hub

Get Started
azure logo

We recommend using Azure Native.

Azure v6.28.0 published on Friday, Oct 3, 2025 by Pulumi
pulumi/pulumi-azure

    Manages an AI Foundry Hub.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const current = azure.core.getClientConfig({});
const example = new azure.core.ResourceGroup("example", {
    name: "example",
    location: "westeurope",
});
const exampleKeyVault = new azure.keyvault.KeyVault("example", {
    name: "examplekv",
    location: example.location,
    resourceGroupName: example.name,
    tenantId: current.then(current => current.tenantId),
    skuName: "standard",
    purgeProtectionEnabled: true,
});
const test = new azure.keyvault.AccessPolicy("test", {
    keyVaultId: exampleKeyVault.id,
    tenantId: current.then(current => current.tenantId),
    objectId: current.then(current => current.objectId),
    keyPermissions: [
        "Create",
        "Get",
        "Delete",
        "Purge",
        "GetRotationPolicy",
    ],
});
const exampleAccount = new azure.storage.Account("example", {
    name: "examplesa",
    location: example.location,
    resourceGroupName: example.name,
    accountTier: "Standard",
    accountReplicationType: "LRS",
});
const exampleAIServices = new azure.cognitive.AIServices("example", {
    name: "exampleaiservices",
    location: example.location,
    resourceGroupName: example.name,
    skuName: "S0",
});
const exampleHub = new azure.aifoundry.Hub("example", {
    name: "exampleaihub",
    location: exampleAIServices.location,
    resourceGroupName: example.name,
    storageAccountId: exampleAccount.id,
    keyVaultId: exampleKeyVault.id,
    identity: {
        type: "SystemAssigned",
    },
});

    import pulumi
import pulumi_azure as azure

current = azure.core.get_client_config()
example = azure.core.ResourceGroup("example",
    name="example",
    location="westeurope")
example_key_vault = azure.keyvault.KeyVault("example",
    name="examplekv",
    location=example.location,
    resource_group_name=example.name,
    tenant_id=current.tenant_id,
    sku_name="standard",
    purge_protection_enabled=True)
test = azure.keyvault.AccessPolicy("test",
    key_vault_id=example_key_vault.id,
    tenant_id=current.tenant_id,
    object_id=current.object_id,
    key_permissions=[
        "Create",
        "Get",
        "Delete",
        "Purge",
        "GetRotationPolicy",
    ])
example_account = azure.storage.Account("example",
    name="examplesa",
    location=example.location,
    resource_group_name=example.name,
    account_tier="Standard",
    account_replication_type="LRS")
example_ai_services = azure.cognitive.AIServices("example",
    name="exampleaiservices",
    location=example.location,
    resource_group_name=example.name,
    sku_name="S0")
example_hub = azure.aifoundry.Hub("example",
    name="exampleaihub",
    location=example_ai_services.location,
    resource_group_name=example.name,
    storage_account_id=example_account.id,
    key_vault_id=example_key_vault.id,
    identity={
        "type": "SystemAssigned",
    })

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/aifoundry"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/cognitive"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/keyvault"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example"),
			Location: pulumi.String("westeurope"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                   pulumi.String("examplekv"),
			Location:               example.Location,
			ResourceGroupName:      example.Name,
			TenantId:               pulumi.String(current.TenantId),
			SkuName:                pulumi.String("standard"),
			PurgeProtectionEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewAccessPolicy(ctx, "test", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   pulumi.String(current.ObjectId),
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Create"),
				pulumi.String("Get"),
				pulumi.String("Delete"),
				pulumi.String("Purge"),
				pulumi.String("GetRotationPolicy"),
			},
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
			Name:                   pulumi.String("examplesa"),
			Location:               example.Location,
			ResourceGroupName:      example.Name,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleAIServices, err := cognitive.NewAIServices(ctx, "example", &cognitive.AIServicesArgs{
			Name:              pulumi.String("exampleaiservices"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			SkuName:           pulumi.String("S0"),
		})
		if err != nil {
			return err
		}
		_, err = aifoundry.NewHub(ctx, "example", &aifoundry.HubArgs{
			Name:              pulumi.String("exampleaihub"),
			Location:          exampleAIServices.Location,
			ResourceGroupName: example.Name,
			StorageAccountId:  exampleAccount.ID(),
			KeyVaultId:        exampleKeyVault.ID(),
			Identity: &aifoundry.HubIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var current = Azure.Core.GetClientConfig.Invoke();

    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example",
        Location = "westeurope",
    });

    var exampleKeyVault = new Azure.KeyVault.KeyVault("example", new()
    {
        Name = "examplekv",
        Location = example.Location,
        ResourceGroupName = example.Name,
        TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
        SkuName = "standard",
        PurgeProtectionEnabled = true,
    });

    var test = new Azure.KeyVault.AccessPolicy("test", new()
    {
        KeyVaultId = exampleKeyVault.Id,
        TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
        ObjectId = current.Apply(getClientConfigResult => getClientConfigResult.ObjectId),
        KeyPermissions = new[]
        {
            "Create",
            "Get",
            "Delete",
            "Purge",
            "GetRotationPolicy",
        },
    });

    var exampleAccount = new Azure.Storage.Account("example", new()
    {
        Name = "examplesa",
        Location = example.Location,
        ResourceGroupName = example.Name,
        AccountTier = "Standard",
        AccountReplicationType = "LRS",
    });

    var exampleAIServices = new Azure.Cognitive.AIServices("example", new()
    {
        Name = "exampleaiservices",
        Location = example.Location,
        ResourceGroupName = example.Name,
        SkuName = "S0",
    });

    var exampleHub = new Azure.AIFoundry.Hub("example", new()
    {
        Name = "exampleaihub",
        Location = exampleAIServices.Location,
        ResourceGroupName = example.Name,
        StorageAccountId = exampleAccount.Id,
        KeyVaultId = exampleKeyVault.Id,
        Identity = new Azure.AIFoundry.Inputs.HubIdentityArgs
        {
            Type = "SystemAssigned",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.keyvault.KeyVault;
import com.pulumi.azure.keyvault.KeyVaultArgs;
import com.pulumi.azure.keyvault.AccessPolicy;
import com.pulumi.azure.keyvault.AccessPolicyArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.cognitive.AIServices;
import com.pulumi.azure.cognitive.AIServicesArgs;
import com.pulumi.azure.aifoundry.Hub;
import com.pulumi.azure.aifoundry.HubArgs;
import com.pulumi.azure.aifoundry.inputs.HubIdentityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var current = CoreFunctions.getClientConfig(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference);

        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example")
            .location("westeurope")
            .build());

        var exampleKeyVault = new KeyVault("exampleKeyVault", KeyVaultArgs.builder()
            .name("examplekv")
            .location(example.location())
            .resourceGroupName(example.name())
            .tenantId(current.tenantId())
            .skuName("standard")
            .purgeProtectionEnabled(true)
            .build());

        var test = new AccessPolicy("test", AccessPolicyArgs.builder()
            .keyVaultId(exampleKeyVault.id())
            .tenantId(current.tenantId())
            .objectId(current.objectId())
            .keyPermissions(            
                "Create",
                "Get",
                "Delete",
                "Purge",
                "GetRotationPolicy")
            .build());

        var exampleAccount = new Account("exampleAccount", AccountArgs.builder()
            .name("examplesa")
            .location(example.location())
            .resourceGroupName(example.name())
            .accountTier("Standard")
            .accountReplicationType("LRS")
            .build());

        var exampleAIServices = new AIServices("exampleAIServices", AIServicesArgs.builder()
            .name("exampleaiservices")
            .location(example.location())
            .resourceGroupName(example.name())
            .skuName("S0")
            .build());

        var exampleHub = new Hub("exampleHub", HubArgs.builder()
            .name("exampleaihub")
            .location(exampleAIServices.location())
            .resourceGroupName(example.name())
            .storageAccountId(exampleAccount.id())
            .keyVaultId(exampleKeyVault.id())
            .identity(HubIdentityArgs.builder()
                .type("SystemAssigned")
                .build())
            .build());

    }
}

    resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example
      location: westeurope
  exampleKeyVault:
    type: azure:keyvault:KeyVault
    name: example
    properties:
      name: examplekv
      location: ${example.location}
      resourceGroupName: ${example.name}
      tenantId: ${current.tenantId}
      skuName: standard
      purgeProtectionEnabled: true
  test:
    type: azure:keyvault:AccessPolicy
    properties:
      keyVaultId: ${exampleKeyVault.id}
      tenantId: ${current.tenantId}
      objectId: ${current.objectId}
      keyPermissions:
        - Create
        - Get
        - Delete
        - Purge
        - GetRotationPolicy
  exampleAccount:
    type: azure:storage:Account
    name: example
    properties:
      name: examplesa
      location: ${example.location}
      resourceGroupName: ${example.name}
      accountTier: Standard
      accountReplicationType: LRS
  exampleAIServices:
    type: azure:cognitive:AIServices
    name: example
    properties:
      name: exampleaiservices
      location: ${example.location}
      resourceGroupName: ${example.name}
      skuName: S0
  exampleHub:
    type: azure:aifoundry:Hub
    name: example
    properties:
      name: exampleaihub
      location: ${exampleAIServices.location}
      resourceGroupName: ${example.name}
      storageAccountId: ${exampleAccount.id}
      keyVaultId: ${exampleKeyVault.id}
      identity:
        type: SystemAssigned
variables:
  current:
    fn::invoke:
      function: azure:core:getClientConfig
      arguments: {}

    API Providers

    This resource uses the following Azure API Providers:

    • Microsoft.MachineLearningServices - 2025-06-01

    Create Hub Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Hub(name: string, args: HubArgs, opts?: CustomResourceOptions);
    @overload
def Hub(resource_name: str,
        args: HubArgs,
        opts: Optional[ResourceOptions] = None)

@overload
def Hub(resource_name: str,
        opts: Optional[ResourceOptions] = None,
        identity: Optional[HubIdentityArgs] = None,
        storage_account_id: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        key_vault_id: Optional[str] = None,
        location: Optional[str] = None,
        high_business_impact_enabled: Optional[bool] = None,
        friendly_name: Optional[str] = None,
        encryption: Optional[HubEncryptionArgs] = None,
        application_insights_id: Optional[str] = None,
        managed_network: Optional[HubManagedNetworkArgs] = None,
        name: Optional[str] = None,
        primary_user_assigned_identity: Optional[str] = None,
        public_network_access: Optional[str] = None,
        description: Optional[str] = None,
        container_registry_id: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None)
    func NewHub(ctx *Context, name string, args HubArgs, opts ...ResourceOption) (*Hub, error)
    public Hub(string name, HubArgs args, CustomResourceOptions? opts = null)
    public Hub(String name, HubArgs args)
public Hub(String name, HubArgs args, CustomResourceOptions options)

    type: azure:aifoundry:Hub
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args HubArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args HubArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args HubArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args HubArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args HubArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var hubResource = new Azure.AIFoundry.Hub("hubResource", new()
{
    Identity = new Azure.AIFoundry.Inputs.HubIdentityArgs
    {
        Type = "string",
        IdentityIds = new[]
        {
            "string",
        },
        PrincipalId = "string",
        TenantId = "string",
    },
    StorageAccountId = "string",
    ResourceGroupName = "string",
    KeyVaultId = "string",
    Location = "string",
    HighBusinessImpactEnabled = false,
    FriendlyName = "string",
    Encryption = new Azure.AIFoundry.Inputs.HubEncryptionArgs
    {
        KeyId = "string",
        KeyVaultId = "string",
        UserAssignedIdentityId = "string",
    },
    ApplicationInsightsId = "string",
    ManagedNetwork = new Azure.AIFoundry.Inputs.HubManagedNetworkArgs
    {
        IsolationMode = "string",
    },
    Name = "string",
    PrimaryUserAssignedIdentity = "string",
    PublicNetworkAccess = "string",
    Description = "string",
    ContainerRegistryId = "string",
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := aifoundry.NewHub(ctx, "hubResource", &aifoundry.HubArgs{
	Identity: &aifoundry.HubIdentityArgs{
		Type: pulumi.String("string"),
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrincipalId: pulumi.String("string"),
		TenantId:    pulumi.String("string"),
	},
	StorageAccountId:          pulumi.String("string"),
	ResourceGroupName:         pulumi.String("string"),
	KeyVaultId:                pulumi.String("string"),
	Location:                  pulumi.String("string"),
	HighBusinessImpactEnabled: pulumi.Bool(false),
	FriendlyName:              pulumi.String("string"),
	Encryption: &aifoundry.HubEncryptionArgs{
		KeyId:                  pulumi.String("string"),
		KeyVaultId:             pulumi.String("string"),
		UserAssignedIdentityId: pulumi.String("string"),
	},
	ApplicationInsightsId: pulumi.String("string"),
	ManagedNetwork: &aifoundry.HubManagedNetworkArgs{
		IsolationMode: pulumi.String("string"),
	},
	Name:                        pulumi.String("string"),
	PrimaryUserAssignedIdentity: pulumi.String("string"),
	PublicNetworkAccess:         pulumi.String("string"),
	Description:                 pulumi.String("string"),
	ContainerRegistryId:         pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var hubResource = new com.pulumi.azure.aifoundry.Hub("hubResource", com.pulumi.azure.aifoundry.HubArgs.builder()
    .identity(HubIdentityArgs.builder()
        .type("string")
        .identityIds("string")
        .principalId("string")
        .tenantId("string")
        .build())
    .storageAccountId("string")
    .resourceGroupName("string")
    .keyVaultId("string")
    .location("string")
    .highBusinessImpactEnabled(false)
    .friendlyName("string")
    .encryption(HubEncryptionArgs.builder()
        .keyId("string")
        .keyVaultId("string")
        .userAssignedIdentityId("string")
        .build())
    .applicationInsightsId("string")
    .managedNetwork(HubManagedNetworkArgs.builder()
        .isolationMode("string")
        .build())
    .name("string")
    .primaryUserAssignedIdentity("string")
    .publicNetworkAccess("string")
    .description("string")
    .containerRegistryId("string")
    .tags(Map.of("string", "string"))
    .build());

    hub_resource = azure.aifoundry.Hub("hubResource",
    identity={
        "type": "string",
        "identity_ids": ["string"],
        "principal_id": "string",
        "tenant_id": "string",
    },
    storage_account_id="string",
    resource_group_name="string",
    key_vault_id="string",
    location="string",
    high_business_impact_enabled=False,
    friendly_name="string",
    encryption={
        "key_id": "string",
        "key_vault_id": "string",
        "user_assigned_identity_id": "string",
    },
    application_insights_id="string",
    managed_network={
        "isolation_mode": "string",
    },
    name="string",
    primary_user_assigned_identity="string",
    public_network_access="string",
    description="string",
    container_registry_id="string",
    tags={
        "string": "string",
    })

    const hubResource = new azure.aifoundry.Hub("hubResource", {
    identity: {
        type: "string",
        identityIds: ["string"],
        principalId: "string",
        tenantId: "string",
    },
    storageAccountId: "string",
    resourceGroupName: "string",
    keyVaultId: "string",
    location: "string",
    highBusinessImpactEnabled: false,
    friendlyName: "string",
    encryption: {
        keyId: "string",
        keyVaultId: "string",
        userAssignedIdentityId: "string",
    },
    applicationInsightsId: "string",
    managedNetwork: {
        isolationMode: "string",
    },
    name: "string",
    primaryUserAssignedIdentity: "string",
    publicNetworkAccess: "string",
    description: "string",
    containerRegistryId: "string",
    tags: {
        string: "string",
    },
});

    type: azure:aifoundry:Hub
properties:
    applicationInsightsId: string
    containerRegistryId: string
    description: string
    encryption:
        keyId: string
        keyVaultId: string
        userAssignedIdentityId: string
    friendlyName: string
    highBusinessImpactEnabled: false
    identity:
        identityIds:
            - string
        principalId: string
        tenantId: string
        type: string
    keyVaultId: string
    location: string
    managedNetwork:
        isolationMode: string
    name: string
    primaryUserAssignedIdentity: string
    publicNetworkAccess: string
    resourceGroupName: string
    storageAccountId: string
    tags:
        string: string

    Hub Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Hub resource accepts the following input properties:

    Identity HubIdentity
    A identity block as defined below.
    KeyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    ResourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    StorageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    ApplicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    ContainerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    Description string
    The description of this AI Foundry Hub.
    Encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    FriendlyName string
    The display name of this AI Foundry Hub.
    HighBusinessImpactEnabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    Location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    ManagedNetwork HubManagedNetwork
    A managed_network block as defined below.
    Name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    PrimaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    PublicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the AI Foundry Hub.
    Identity HubIdentityArgs
    A identity block as defined below.
    KeyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    ResourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    StorageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    ApplicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    ContainerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    Description string
    The description of this AI Foundry Hub.
    Encryption HubEncryptionArgs
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    FriendlyName string
    The display name of this AI Foundry Hub.
    HighBusinessImpactEnabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    Location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    ManagedNetwork HubManagedNetworkArgs
    A managed_network block as defined below.
    Name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    PrimaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    PublicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    Tags map[string]string
    A mapping of tags which should be assigned to the AI Foundry Hub.
    identity HubIdentity
    A identity block as defined below.
    keyVaultId String
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    resourceGroupName String
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId String
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    applicationInsightsId String
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId String
    The Container Registry ID that should be used by this AI Foundry Hub.
    description String
    The description of this AI Foundry Hub.
    encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName String
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled Boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    location String
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork HubManagedNetwork
    A managed_network block as defined below.
    name String
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity String
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess String
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    tags Map<String,String>
    A mapping of tags which should be assigned to the AI Foundry Hub.
    identity HubIdentity
    A identity block as defined below.
    keyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    resourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    applicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    description string
    The description of this AI Foundry Hub.
    encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName string
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork HubManagedNetwork
    A managed_network block as defined below.
    name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    tags {[key: string]: string}
    A mapping of tags which should be assigned to the AI Foundry Hub.
    identity HubIdentityArgs
    A identity block as defined below.
    key_vault_id str
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    resource_group_name str
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storage_account_id str
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    application_insights_id str
    The Application Insights ID that should be used by this AI Foundry Hub.
    container_registry_id str
    The Container Registry ID that should be used by this AI Foundry Hub.
    description str
    The description of this AI Foundry Hub.
    encryption HubEncryptionArgs
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendly_name str
    The display name of this AI Foundry Hub.
    high_business_impact_enabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    location str
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managed_network HubManagedNetworkArgs
    A managed_network block as defined below.
    name str
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primary_user_assigned_identity str
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    public_network_access str
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    tags Mapping[str, str]
    A mapping of tags which should be assigned to the AI Foundry Hub.
    identity Property Map
    A identity block as defined below.
    keyVaultId String
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    resourceGroupName String
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId String
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    applicationInsightsId String
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId String
    The Container Registry ID that should be used by this AI Foundry Hub.
    description String
    The description of this AI Foundry Hub.
    encryption Property Map
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName String
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled Boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    location String
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork Property Map
    A managed_network block as defined below.
    name String
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity String
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess String
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    tags Map<String>
    A mapping of tags which should be assigned to the AI Foundry Hub.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Hub resource produces the following output properties:

    DiscoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    Id string
    The provider-assigned unique ID for this managed resource.
    WorkspaceId string
    The immutable ID associated with this AI Foundry Hub.
    DiscoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    Id string
    The provider-assigned unique ID for this managed resource.
    WorkspaceId string
    The immutable ID associated with this AI Foundry Hub.
    discoveryUrl String
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    id String
    The provider-assigned unique ID for this managed resource.
    workspaceId String
    The immutable ID associated with this AI Foundry Hub.
    discoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    id string
    The provider-assigned unique ID for this managed resource.
    workspaceId string
    The immutable ID associated with this AI Foundry Hub.
    discovery_url str
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    id str
    The provider-assigned unique ID for this managed resource.
    workspace_id str
    The immutable ID associated with this AI Foundry Hub.
    discoveryUrl String
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    id String
    The provider-assigned unique ID for this managed resource.
    workspaceId String
    The immutable ID associated with this AI Foundry Hub.

    Look up Existing Hub Resource

    Get an existing Hub resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: HubState, opts?: CustomResourceOptions): Hub
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_insights_id: Optional[str] = None,
        container_registry_id: Optional[str] = None,
        description: Optional[str] = None,
        discovery_url: Optional[str] = None,
        encryption: Optional[HubEncryptionArgs] = None,
        friendly_name: Optional[str] = None,
        high_business_impact_enabled: Optional[bool] = None,
        identity: Optional[HubIdentityArgs] = None,
        key_vault_id: Optional[str] = None,
        location: Optional[str] = None,
        managed_network: Optional[HubManagedNetworkArgs] = None,
        name: Optional[str] = None,
        primary_user_assigned_identity: Optional[str] = None,
        public_network_access: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        storage_account_id: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        workspace_id: Optional[str] = None) -> Hub
    func GetHub(ctx *Context, name string, id IDInput, state *HubState, opts ...ResourceOption) (*Hub, error)
    public static Hub Get(string name, Input<string> id, HubState? state, CustomResourceOptions? opts = null)
    public static Hub get(String name, Output<String> id, HubState state, CustomResourceOptions options)
    resources:  _:    type: azure:aifoundry:Hub    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApplicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    ContainerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    Description string
    The description of this AI Foundry Hub.
    DiscoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    Encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    FriendlyName string
    The display name of this AI Foundry Hub.
    HighBusinessImpactEnabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    Identity HubIdentity
    A identity block as defined below.
    KeyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    Location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    ManagedNetwork HubManagedNetwork
    A managed_network block as defined below.
    Name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    PrimaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    PublicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    ResourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    StorageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the AI Foundry Hub.
    WorkspaceId string
    The immutable ID associated with this AI Foundry Hub.
    ApplicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    ContainerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    Description string
    The description of this AI Foundry Hub.
    DiscoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    Encryption HubEncryptionArgs
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    FriendlyName string
    The display name of this AI Foundry Hub.
    HighBusinessImpactEnabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    Identity HubIdentityArgs
    A identity block as defined below.
    KeyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    Location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    ManagedNetwork HubManagedNetworkArgs
    A managed_network block as defined below.
    Name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    PrimaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    PublicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    ResourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    StorageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    Tags map[string]string
    A mapping of tags which should be assigned to the AI Foundry Hub.
    WorkspaceId string
    The immutable ID associated with this AI Foundry Hub.
    applicationInsightsId String
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId String
    The Container Registry ID that should be used by this AI Foundry Hub.
    description String
    The description of this AI Foundry Hub.
    discoveryUrl String
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName String
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled Boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    identity HubIdentity
    A identity block as defined below.
    keyVaultId String
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    location String
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork HubManagedNetwork
    A managed_network block as defined below.
    name String
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity String
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess String
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    resourceGroupName String
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId String
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    tags Map<String,String>
    A mapping of tags which should be assigned to the AI Foundry Hub.
    workspaceId String
    The immutable ID associated with this AI Foundry Hub.
    applicationInsightsId string
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId string
    The Container Registry ID that should be used by this AI Foundry Hub.
    description string
    The description of this AI Foundry Hub.
    discoveryUrl string
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    encryption HubEncryption
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName string
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    identity HubIdentity
    A identity block as defined below.
    keyVaultId string
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    location string
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork HubManagedNetwork
    A managed_network block as defined below.
    name string
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity string
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess string
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    resourceGroupName string
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId string
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    tags {[key: string]: string}
    A mapping of tags which should be assigned to the AI Foundry Hub.
    workspaceId string
    The immutable ID associated with this AI Foundry Hub.
    application_insights_id str
    The Application Insights ID that should be used by this AI Foundry Hub.
    container_registry_id str
    The Container Registry ID that should be used by this AI Foundry Hub.
    description str
    The description of this AI Foundry Hub.
    discovery_url str
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    encryption HubEncryptionArgs
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendly_name str
    The display name of this AI Foundry Hub.
    high_business_impact_enabled bool

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    identity HubIdentityArgs
    A identity block as defined below.
    key_vault_id str
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    location str
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managed_network HubManagedNetworkArgs
    A managed_network block as defined below.
    name str
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primary_user_assigned_identity str
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    public_network_access str
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    resource_group_name str
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storage_account_id str
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    tags Mapping[str, str]
    A mapping of tags which should be assigned to the AI Foundry Hub.
    workspace_id str
    The immutable ID associated with this AI Foundry Hub.
    applicationInsightsId String
    The Application Insights ID that should be used by this AI Foundry Hub.
    containerRegistryId String
    The Container Registry ID that should be used by this AI Foundry Hub.
    description String
    The description of this AI Foundry Hub.
    discoveryUrl String
    The URL for the discovery service to identify regional endpoints for AI Foundry Hub services.
    encryption Property Map
    An encryption block as defined below. Changing this forces a new AI Foundry Hub to be created.
    friendlyName String
    The display name of this AI Foundry Hub.
    highBusinessImpactEnabled Boolean

    Whether High Business Impact (HBI) should be enabled or not. Enabling this setting will reduce diagnostic data collected by the service. Changing this forces a new AI Foundry Hub to be created. Defaults to false.

    Note: high_business_impact_enabled will be enabled by default when creating an AI Foundry Hub with encryption enabled.

    identity Property Map
    A identity block as defined below.
    keyVaultId String
    The Key Vault ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    location String
    The Azure Region where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    managedNetwork Property Map
    A managed_network block as defined below.
    name String
    The name which should be used for this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    primaryUserAssignedIdentity String
    The user assigned identity ID that represents the AI Foundry Hub identity. This must be set when enabling encryption with a user assigned identity.
    publicNetworkAccess String
    Whether public network access for this AI Service Hub should be enabled. Possible values include Enabled and Disabled. Defaults to Enabled.
    resourceGroupName String
    The name of the Resource Group where the AI Foundry Hub should exist. Changing this forces a new AI Foundry Hub to be created.
    storageAccountId String
    The Storage Account ID that should be used by this AI Foundry Hub. Changing this forces a new AI Foundry Hub to be created.
    tags Map<String>
    A mapping of tags which should be assigned to the AI Foundry Hub.
    workspaceId String
    The immutable ID associated with this AI Foundry Hub.

    Supporting Types

    HubEncryption, HubEncryptionArgs

    KeyId string
    The Key Vault URI to access the encryption key.
    KeyVaultId string
    The Key Vault ID where the customer owned encryption key exists.
    UserAssignedIdentityId string

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    KeyId string
    The Key Vault URI to access the encryption key.
    KeyVaultId string
    The Key Vault ID where the customer owned encryption key exists.
    UserAssignedIdentityId string

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    keyId String
    The Key Vault URI to access the encryption key.
    keyVaultId String
    The Key Vault ID where the customer owned encryption key exists.
    userAssignedIdentityId String

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    keyId string
    The Key Vault URI to access the encryption key.
    keyVaultId string
    The Key Vault ID where the customer owned encryption key exists.
    userAssignedIdentityId string

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    key_id str
    The Key Vault URI to access the encryption key.
    key_vault_id str
    The Key Vault ID where the customer owned encryption key exists.
    user_assigned_identity_id str

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    keyId String
    The Key Vault URI to access the encryption key.
    keyVaultId String
    The Key Vault ID where the customer owned encryption key exists.
    userAssignedIdentityId String

    The user assigned identity ID that has access to the encryption key.

    Note: user_assigned_identity_id must be set whenidentity.type is UserAssigned in order for the service to find the assigned permissions.

    HubIdentity, HubIdentityArgs

    Type string
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    IdentityIds List<string>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    Type string
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    IdentityIds []string

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds List<String>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.
    type string
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds string[]

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId string
    The Principal ID associated with this Managed Service Identity.
    tenantId string
    The Tenant ID associated with this Managed Service Identity.
    type str
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identity_ids Sequence[str]

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principal_id str
    The Principal ID associated with this Managed Service Identity.
    tenant_id str
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds List<String>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.

    Note: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.

    HubManagedNetwork, HubManagedNetworkArgs

    IsolationMode string
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.
    IsolationMode string
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.
    isolationMode String
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.
    isolationMode string
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.
    isolation_mode str
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.
    isolationMode String
    The isolation mode of the AI Foundry Hub. Possible values are Disabled, AllowOnlyApprovedOutbound, and AllowInternetOutbound.

    Import

    AI Foundry Hubs can be imported using the resource id, e.g.

    $ pulumi import azure:aifoundry/hub:Hub example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.MachineLearningServices/workspaces/hub1

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure v6.28.0 published on Friday, Oct 3, 2025 by Pulumi
    pulumi/pulumi-azure
      Meet Neo: Your AI Platform Teammate