1. Pulumi Registry
  2. Azure Classic
  3. API Docs
  4. hsm
  5. Module
azure logo
Azure Classic v5.38.0, Mar 21 23

azure.hsm.Module

Manages a Dedicated Hardware Security Module.

Note: Before using this resource, it’s required to submit the request of registering the providers and features with Azure CLI az provider register --namespace Microsoft.HardwareSecurityModules && az feature register --namespace Microsoft.HardwareSecurityModules --name AzureDedicatedHSM && az provider register --namespace Microsoft.Network && az feature register --namespace Microsoft.Network --name AllowBaremetalServers and ask service team (hsmrequest@microsoft.com) to approve. See more details from https://docs.microsoft.com/azure/dedicated-hsm/tutorial-deploy-hsm-cli#prerequisites.

Note: If the quota is not enough in some region, please submit the quota request to service team.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new()
    {
        Location = "West Europe",
    });

    var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("exampleVirtualNetwork", new()
    {
        AddressSpaces = new[]
        {
            "10.2.0.0/16",
        },
        Location = exampleResourceGroup.Location,
        ResourceGroupName = exampleResourceGroup.Name,
    });

    var exampleSubnet = new Azure.Network.Subnet("exampleSubnet", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.2.0.0/24",
        },
    });

    var example2 = new Azure.Network.Subnet("example2", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.2.1.0/24",
        },
        Delegations = new[]
        {
            new Azure.Network.Inputs.SubnetDelegationArgs
            {
                Name = "first",
                ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
                {
                    Name = "Microsoft.HardwareSecurityModules/dedicatedHSMs",
                    Actions = new[]
                    {
                        "Microsoft.Network/networkinterfaces/*",
                        "Microsoft.Network/virtualNetworks/subnets/join/action",
                    },
                },
            },
        },
    });

    var example3 = new Azure.Network.Subnet("example3", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.2.255.0/26",
        },
    });

    var examplePublicIp = new Azure.Network.PublicIp("examplePublicIp", new()
    {
        Location = exampleResourceGroup.Location,
        ResourceGroupName = exampleResourceGroup.Name,
        AllocationMethod = "Dynamic",
    });

    var exampleVirtualNetworkGateway = new Azure.Network.VirtualNetworkGateway("exampleVirtualNetworkGateway", new()
    {
        Location = exampleResourceGroup.Location,
        ResourceGroupName = exampleResourceGroup.Name,
        Type = "ExpressRoute",
        VpnType = "PolicyBased",
        Sku = "Standard",
        IpConfigurations = new[]
        {
            new Azure.Network.Inputs.VirtualNetworkGatewayIpConfigurationArgs
            {
                PublicIpAddressId = examplePublicIp.Id,
                PrivateIpAddressAllocation = "Dynamic",
                SubnetId = example3.Id,
            },
        },
    });

    var exampleModule = new Azure.Hsm.Module("exampleModule", new()
    {
        Location = exampleResourceGroup.Location,
        ResourceGroupName = exampleResourceGroup.Name,
        SkuName = "payShield10K_LMK1_CPS60",
        ManagementNetworkProfile = new Azure.Hsm.Inputs.ModuleManagementNetworkProfileArgs
        {
            NetworkInterfacePrivateIpAddresses = new[]
            {
                "10.2.1.7",
            },
            SubnetId = example2.Id,
        },
        NetworkProfile = new Azure.Hsm.Inputs.ModuleNetworkProfileArgs
        {
            NetworkInterfacePrivateIpAddresses = new[]
            {
                "10.2.1.8",
            },
            SubnetId = example2.Id,
        },
        StampId = "stamp2",
        Tags = 
        {
            { "env", "Test" },
        },
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleVirtualNetworkGateway,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/hsm"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "exampleVirtualNetwork", &network.VirtualNetworkArgs{
			AddressSpaces: pulumi.StringArray{
				pulumi.String("10.2.0.0/16"),
			},
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
		})
		if err != nil {
			return err
		}
		_, err = network.NewSubnet(ctx, "exampleSubnet", &network.SubnetArgs{
			ResourceGroupName:  exampleResourceGroup.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.2.0.0/24"),
			},
		})
		if err != nil {
			return err
		}
		example2, err := network.NewSubnet(ctx, "example2", &network.SubnetArgs{
			ResourceGroupName:  exampleResourceGroup.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.2.1.0/24"),
			},
			Delegations: network.SubnetDelegationArray{
				&network.SubnetDelegationArgs{
					Name: pulumi.String("first"),
					ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
						Name: pulumi.String("Microsoft.HardwareSecurityModules/dedicatedHSMs"),
						Actions: pulumi.StringArray{
							pulumi.String("Microsoft.Network/networkinterfaces/*"),
							pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		example3, err := network.NewSubnet(ctx, "example3", &network.SubnetArgs{
			ResourceGroupName:  exampleResourceGroup.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.2.255.0/26"),
			},
		})
		if err != nil {
			return err
		}
		examplePublicIp, err := network.NewPublicIp(ctx, "examplePublicIp", &network.PublicIpArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			AllocationMethod:  pulumi.String("Dynamic"),
		})
		if err != nil {
			return err
		}
		exampleVirtualNetworkGateway, err := network.NewVirtualNetworkGateway(ctx, "exampleVirtualNetworkGateway", &network.VirtualNetworkGatewayArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Type:              pulumi.String("ExpressRoute"),
			VpnType:           pulumi.String("PolicyBased"),
			Sku:               pulumi.String("Standard"),
			IpConfigurations: network.VirtualNetworkGatewayIpConfigurationArray{
				&network.VirtualNetworkGatewayIpConfigurationArgs{
					PublicIpAddressId:          examplePublicIp.ID(),
					PrivateIpAddressAllocation: pulumi.String("Dynamic"),
					SubnetId:                   example3.ID(),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = hsm.NewModule(ctx, "exampleModule", &hsm.ModuleArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			SkuName:           pulumi.String("payShield10K_LMK1_CPS60"),
			ManagementNetworkProfile: &hsm.ModuleManagementNetworkProfileArgs{
				NetworkInterfacePrivateIpAddresses: pulumi.StringArray{
					pulumi.String("10.2.1.7"),
				},
				SubnetId: example2.ID(),
			},
			NetworkProfile: &hsm.ModuleNetworkProfileArgs{
				NetworkInterfacePrivateIpAddresses: pulumi.StringArray{
					pulumi.String("10.2.1.8"),
				},
				SubnetId: example2.ID(),
			},
			StampId: pulumi.String("stamp2"),
			Tags: pulumi.StringMap{
				"env": pulumi.String("Test"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleVirtualNetworkGateway,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationServiceDelegationArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.VirtualNetworkGateway;
import com.pulumi.azure.network.VirtualNetworkGatewayArgs;
import com.pulumi.azure.network.inputs.VirtualNetworkGatewayIpConfigurationArgs;
import com.pulumi.azure.hsm.Module;
import com.pulumi.azure.hsm.ModuleArgs;
import com.pulumi.azure.hsm.inputs.ModuleManagementNetworkProfileArgs;
import com.pulumi.azure.hsm.inputs.ModuleNetworkProfileArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()        
            .addressSpaces("10.2.0.0/16")
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .build());

        var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.2.0.0/24")
            .build());

        var example2 = new Subnet("example2", SubnetArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.2.1.0/24")
            .delegations(SubnetDelegationArgs.builder()
                .name("first")
                .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
                    .name("Microsoft.HardwareSecurityModules/dedicatedHSMs")
                    .actions(                    
                        "Microsoft.Network/networkinterfaces/*",
                        "Microsoft.Network/virtualNetworks/subnets/join/action")
                    .build())
                .build())
            .build());

        var example3 = new Subnet("example3", SubnetArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.2.255.0/26")
            .build());

        var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()        
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .allocationMethod("Dynamic")
            .build());

        var exampleVirtualNetworkGateway = new VirtualNetworkGateway("exampleVirtualNetworkGateway", VirtualNetworkGatewayArgs.builder()        
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .type("ExpressRoute")
            .vpnType("PolicyBased")
            .sku("Standard")
            .ipConfigurations(VirtualNetworkGatewayIpConfigurationArgs.builder()
                .publicIpAddressId(examplePublicIp.id())
                .privateIpAddressAllocation("Dynamic")
                .subnetId(example3.id())
                .build())
            .build());

        var exampleModule = new Module("exampleModule", ModuleArgs.builder()        
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .skuName("payShield10K_LMK1_CPS60")
            .managementNetworkProfile(ModuleManagementNetworkProfileArgs.builder()
                .networkInterfacePrivateIpAddresses("10.2.1.7")
                .subnetId(example2.id())
                .build())
            .networkProfile(ModuleNetworkProfileArgs.builder()
                .networkInterfacePrivateIpAddresses("10.2.1.8")
                .subnetId(example2.id())
                .build())
            .stampId("stamp2")
            .tags(Map.of("env", "Test"))
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleVirtualNetworkGateway)
                .build());

    }
}

import pulumi
import pulumi_azure as azure

example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_virtual_network = azure.network.VirtualNetwork("exampleVirtualNetwork",
    address_spaces=["10.2.0.0/16"],
    location=example_resource_group.location,
    resource_group_name=example_resource_group.name)
example_subnet = azure.network.Subnet("exampleSubnet",
    resource_group_name=example_resource_group.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.2.0.0/24"])
example2 = azure.network.Subnet("example2",
    resource_group_name=example_resource_group.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.2.1.0/24"],
    delegations=[azure.network.SubnetDelegationArgs(
        name="first",
        service_delegation=azure.network.SubnetDelegationServiceDelegationArgs(
            name="Microsoft.HardwareSecurityModules/dedicatedHSMs",
            actions=[
                "Microsoft.Network/networkinterfaces/*",
                "Microsoft.Network/virtualNetworks/subnets/join/action",
            ],
        ),
    )])
example3 = azure.network.Subnet("example3",
    resource_group_name=example_resource_group.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.2.255.0/26"])
example_public_ip = azure.network.PublicIp("examplePublicIp",
    location=example_resource_group.location,
    resource_group_name=example_resource_group.name,
    allocation_method="Dynamic")
example_virtual_network_gateway = azure.network.VirtualNetworkGateway("exampleVirtualNetworkGateway",
    location=example_resource_group.location,
    resource_group_name=example_resource_group.name,
    type="ExpressRoute",
    vpn_type="PolicyBased",
    sku="Standard",
    ip_configurations=[azure.network.VirtualNetworkGatewayIpConfigurationArgs(
        public_ip_address_id=example_public_ip.id,
        private_ip_address_allocation="Dynamic",
        subnet_id=example3.id,
    )])
example_module = azure.hsm.Module("exampleModule",
    location=example_resource_group.location,
    resource_group_name=example_resource_group.name,
    sku_name="payShield10K_LMK1_CPS60",
    management_network_profile=azure.hsm.ModuleManagementNetworkProfileArgs(
        network_interface_private_ip_addresses=["10.2.1.7"],
        subnet_id=example2.id,
    ),
    network_profile=azure.hsm.ModuleNetworkProfileArgs(
        network_interface_private_ip_addresses=["10.2.1.8"],
        subnet_id=example2.id,
    ),
    stamp_id="stamp2",
    tags={
        "env": "Test",
    },
    opts=pulumi.ResourceOptions(depends_on=[example_virtual_network_gateway]))

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("exampleVirtualNetwork", {
    addressSpaces: ["10.2.0.0/16"],
    location: exampleResourceGroup.location,
    resourceGroupName: exampleResourceGroup.name,
});
const exampleSubnet = new azure.network.Subnet("exampleSubnet", {
    resourceGroupName: exampleResourceGroup.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.2.0.0/24"],
});
const example2 = new azure.network.Subnet("example2", {
    resourceGroupName: exampleResourceGroup.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.2.1.0/24"],
    delegations: [{
        name: "first",
        serviceDelegation: {
            name: "Microsoft.HardwareSecurityModules/dedicatedHSMs",
            actions: [
                "Microsoft.Network/networkinterfaces/*",
                "Microsoft.Network/virtualNetworks/subnets/join/action",
            ],
        },
    }],
});
const example3 = new azure.network.Subnet("example3", {
    resourceGroupName: exampleResourceGroup.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.2.255.0/26"],
});
const examplePublicIp = new azure.network.PublicIp("examplePublicIp", {
    location: exampleResourceGroup.location,
    resourceGroupName: exampleResourceGroup.name,
    allocationMethod: "Dynamic",
});
const exampleVirtualNetworkGateway = new azure.network.VirtualNetworkGateway("exampleVirtualNetworkGateway", {
    location: exampleResourceGroup.location,
    resourceGroupName: exampleResourceGroup.name,
    type: "ExpressRoute",
    vpnType: "PolicyBased",
    sku: "Standard",
    ipConfigurations: [{
        publicIpAddressId: examplePublicIp.id,
        privateIpAddressAllocation: "Dynamic",
        subnetId: example3.id,
    }],
});
const exampleModule = new azure.hsm.Module("exampleModule", {
    location: exampleResourceGroup.location,
    resourceGroupName: exampleResourceGroup.name,
    skuName: "payShield10K_LMK1_CPS60",
    managementNetworkProfile: {
        networkInterfacePrivateIpAddresses: ["10.2.1.7"],
        subnetId: example2.id,
    },
    networkProfile: {
        networkInterfacePrivateIpAddresses: ["10.2.1.8"],
        subnetId: example2.id,
    },
    stampId: "stamp2",
    tags: {
        env: "Test",
    },
}, {
    dependsOn: [exampleVirtualNetworkGateway],
});

resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleVirtualNetwork:
    type: azure:network:VirtualNetwork
    properties:
      addressSpaces:
        - 10.2.0.0/16
      location: ${exampleResourceGroup.location}
      resourceGroupName: ${exampleResourceGroup.name}
  exampleSubnet:
    type: azure:network:Subnet
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.2.0.0/24
  example2:
    type: azure:network:Subnet
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.2.1.0/24
      delegations:
        - name: first
          serviceDelegation:
            name: Microsoft.HardwareSecurityModules/dedicatedHSMs
            actions:
              - Microsoft.Network/networkinterfaces/*
              - Microsoft.Network/virtualNetworks/subnets/join/action
  example3:
    type: azure:network:Subnet
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.2.255.0/26
  examplePublicIp:
    type: azure:network:PublicIp
    properties:
      location: ${exampleResourceGroup.location}
      resourceGroupName: ${exampleResourceGroup.name}
      allocationMethod: Dynamic
  exampleVirtualNetworkGateway:
    type: azure:network:VirtualNetworkGateway
    properties:
      location: ${exampleResourceGroup.location}
      resourceGroupName: ${exampleResourceGroup.name}
      type: ExpressRoute
      vpnType: PolicyBased
      sku: Standard
      ipConfigurations:
        - publicIpAddressId: ${examplePublicIp.id}
          privateIpAddressAllocation: Dynamic
          subnetId: ${example3.id}
  exampleModule:
    type: azure:hsm:Module
    properties:
      location: ${exampleResourceGroup.location}
      resourceGroupName: ${exampleResourceGroup.name}
      skuName: payShield10K_LMK1_CPS60
      managementNetworkProfile:
        networkInterfacePrivateIpAddresses:
          - 10.2.1.7
        subnetId: ${example2.id}
      networkProfile:
        networkInterfacePrivateIpAddresses:
          - 10.2.1.8
        subnetId: ${example2.id}
      stampId: stamp2
      tags:
        env: Test
    options:
      dependson:
        - ${exampleVirtualNetworkGateway}

Create Module Resource

new Module(name: string, args: ModuleArgs, opts?: CustomResourceOptions);
@overload
def Module(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           location: Optional[str] = None,
           management_network_profile: Optional[ModuleManagementNetworkProfileArgs] = None,
           name: Optional[str] = None,
           network_profile: Optional[ModuleNetworkProfileArgs] = None,
           resource_group_name: Optional[str] = None,
           sku_name: Optional[str] = None,
           stamp_id: Optional[str] = None,
           tags: Optional[Mapping[str, str]] = None,
           zones: Optional[Sequence[str]] = None)
@overload
def Module(resource_name: str,
           args: ModuleArgs,
           opts: Optional[ResourceOptions] = None)
func NewModule(ctx *Context, name string, args ModuleArgs, opts ...ResourceOption) (*Module, error)
public Module(string name, ModuleArgs args, CustomResourceOptions? opts = null)
public Module(String name, ModuleArgs args)
public Module(String name, ModuleArgs args, CustomResourceOptions options)

type: azure:hsm:Module
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ModuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args ModuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args ModuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args ModuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args ModuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Module Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Module resource accepts the following input properties:

NetworkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

ResourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

SkuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

Location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

ManagementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

Name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

StampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

Zones List<string>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

NetworkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

ResourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

SkuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

Location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

ManagementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

Name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

StampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

Tags map[string]string

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

Zones []string

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

resourceGroupName String

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName String

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

location String

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name String

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId String

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Map<String,String>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones List<String>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

resourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones string[]

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

network_profile ModuleNetworkProfileArgs

A network_profile block as defined below.

resource_group_name str

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

sku_name str

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

location str

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

management_network_profile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name str

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

stamp_id str

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones Sequence[str]

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile Property Map

A network_profile block as defined below.

resourceGroupName String

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName String

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

location String

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile Property Map

A management_network_profile block as defined below.

name String

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId String

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Map<String>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones List<String>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

Outputs

All input properties are implicitly available as output properties. Additionally, the Module resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing Module Resource

Get an existing Module resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ModuleState, opts?: CustomResourceOptions): Module
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        location: Optional[str] = None,
        management_network_profile: Optional[ModuleManagementNetworkProfileArgs] = None,
        name: Optional[str] = None,
        network_profile: Optional[ModuleNetworkProfileArgs] = None,
        resource_group_name: Optional[str] = None,
        sku_name: Optional[str] = None,
        stamp_id: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        zones: Optional[Sequence[str]] = None) -> Module
func GetModule(ctx *Context, name string, id IDInput, state *ModuleState, opts ...ResourceOption) (*Module, error)
public static Module Get(string name, Input<string> id, ModuleState? state, CustomResourceOptions? opts = null)
public static Module get(String name, Output<String> id, ModuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

ManagementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

Name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

NetworkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

ResourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

SkuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

StampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

Zones List<string>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

Location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

ManagementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

Name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

NetworkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

ResourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

SkuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

StampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

Tags map[string]string

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

Zones []string

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

location String

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name String

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

resourceGroupName String

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName String

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId String

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Map<String,String>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones List<String>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

location string

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name string

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile ModuleNetworkProfileArgs

A network_profile block as defined below.

resourceGroupName string

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName string

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId string

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones string[]

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

location str

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

management_network_profile ModuleManagementNetworkProfileArgs

A management_network_profile block as defined below.

name str

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

network_profile ModuleNetworkProfileArgs

A network_profile block as defined below.

resource_group_name str

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

sku_name str

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

stamp_id str

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones Sequence[str]

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

location String

The Azure Region where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

managementNetworkProfile Property Map

A management_network_profile block as defined below.

name String

The name which should be used for this Dedicated Hardware Security Module. Changing this forces a new Dedicated Hardware Security Module to be created.

networkProfile Property Map

A network_profile block as defined below.

resourceGroupName String

The name of the Resource Group where the Dedicated Hardware Security Module should exist. Changing this forces a new Dedicated Hardware Security Module to be created.

skuName String

The SKU name of the dedicated hardware security module. Possible values are payShield10K_LMK1_CPS60,payShield10K_LMK1_CPS250,payShield10K_LMK1_CPS2500,payShield10K_LMK2_CPS60,payShield10K_LMK2_CPS250,payShield10K_LMK2_CPS2500 and SafeNet Luna Network HSM A790. Changing this forces a new Dedicated Hardware Security Module to be created.

stampId String

The ID of the stamp. Possible values are stamp1 or stamp2. Changing this forces a new Dedicated Hardware Security Module to be created.

tags Map<String>

A mapping of tags which should be assigned to the Dedicated Hardware Security Module.

zones List<String>

Specifies a list of Availability Zones in which this Dedicated Hardware Security Module should be located. Changing this forces a new Dedicated Hardware Security Module to be created.

Supporting Types

ModuleManagementNetworkProfile

NetworkInterfacePrivateIpAddresses List<string>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

SubnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

NetworkInterfacePrivateIpAddresses []string

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

SubnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses List<String>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId String

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses string[]

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

network_interface_private_ip_addresses Sequence[str]

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnet_id str

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses List<String>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId String

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

ModuleNetworkProfile

NetworkInterfacePrivateIpAddresses List<string>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

SubnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

NetworkInterfacePrivateIpAddresses []string

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

SubnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses List<String>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId String

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses string[]

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId string

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

network_interface_private_ip_addresses Sequence[str]

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnet_id str

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

networkInterfacePrivateIpAddresses List<String>

The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.

subnetId String

The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.

Import

Dedicated Hardware Security Module can be imported using the resource id, e.g.

 $ pulumi import azure:hsm/module:Module example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.HardwareSecurityModules/dedicatedHSMs/hsm1

Package Details

Repository
Azure Classic pulumi/pulumi-azure
License
Apache-2.0
Notes

This Pulumi package is based on the azurerm Terraform Provider.