azure.appconfiguration.ConfigurationStore

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const appconf = new azure.appconfiguration.ConfigurationStore("appconf", {
    name: "appConf1",
    resourceGroupName: example.name,
    location: example.location,
});

import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
appconf = azure.appconfiguration.ConfigurationStore("appconf",
    name="appConf1",
    resource_group_name=example.name,
    location=example.location)

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/appconfiguration"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = appconfiguration.NewConfigurationStore(ctx, "appconf", &appconfiguration.ConfigurationStoreArgs{
			Name:              pulumi.String("appConf1"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var appconf = new Azure.AppConfiguration.ConfigurationStore("appconf", new()
    {
        Name = "appConf1",
        ResourceGroupName = example.Name,
        Location = example.Location,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.appconfiguration.ConfigurationStore;
import com.pulumi.azure.appconfiguration.ConfigurationStoreArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var appconf = new ConfigurationStore("appconf", ConfigurationStoreArgs.builder()
            .name("appConf1")
            .resourceGroupName(example.name())
            .location(example.location())
            .build());

    }
}

resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  appconf:
    type: azure:appconfiguration:ConfigurationStore
    properties:
      name: appConf1
      resourceGroupName: ${example.name}
      location: ${example.location}

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const exampleUserAssignedIdentity = new azure.authorization.UserAssignedIdentity("example", {
    name: "example-identity",
    location: example.location,
    resourceGroupName: example.name,
});
const current = azure.core.getClientConfig({});
const exampleKeyVault = new azure.keyvault.KeyVault("example", {
    name: "exampleKVt123",
    location: example.location,
    resourceGroupName: example.name,
    tenantId: current.then(current => current.tenantId),
    skuName: "standard",
    softDeleteRetentionDays: 7,
    purgeProtectionEnabled: true,
});
const server = new azure.keyvault.AccessPolicy("server", {
    keyVaultId: exampleKeyVault.id,
    tenantId: current.then(current => current.tenantId),
    objectId: exampleUserAssignedIdentity.principalId,
    keyPermissions: [
        "Get",
        "UnwrapKey",
        "WrapKey",
    ],
    secretPermissions: ["Get"],
});
const client = new azure.keyvault.AccessPolicy("client", {
    keyVaultId: exampleKeyVault.id,
    tenantId: current.then(current => current.tenantId),
    objectId: current.then(current => current.objectId),
    keyPermissions: [
        "Get",
        "Create",
        "Delete",
        "List",
        "Restore",
        "Recover",
        "UnwrapKey",
        "WrapKey",
        "Purge",
        "Encrypt",
        "Decrypt",
        "Sign",
        "Verify",
        "GetRotationPolicy",
    ],
    secretPermissions: ["Get"],
});
const exampleKey = new azure.keyvault.Key("example", {
    name: "exampleKVkey",
    keyVaultId: exampleKeyVault.id,
    keyType: "RSA",
    keySize: 2048,
    keyOpts: [
        "decrypt",
        "encrypt",
        "sign",
        "unwrapKey",
        "verify",
        "wrapKey",
    ],
}, {
    dependsOn: [
        client,
        server,
    ],
});
const exampleConfigurationStore = new azure.appconfiguration.ConfigurationStore("example", {
    name: "appConf2",
    resourceGroupName: example.name,
    location: example.location,
    sku: "standard",
    localAuthEnabled: true,
    publicNetworkAccess: "Enabled",
    purgeProtectionEnabled: false,
    softDeleteRetentionDays: 1,
    identity: {
        type: "UserAssigned",
        identityIds: [exampleUserAssignedIdentity.id],
    },
    encryption: {
        keyVaultKeyIdentifier: exampleKey.id,
        identityClientId: exampleUserAssignedIdentity.clientId,
    },
    replicas: [{
        name: "replica1",
        location: "West US",
    }],
    tags: {
        environment: "development",
    },
}, {
    dependsOn: [
        client,
        server,
    ],
});

import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_user_assigned_identity = azure.authorization.UserAssignedIdentity("example",
    name="example-identity",
    location=example.location,
    resource_group_name=example.name)
current = azure.core.get_client_config()
example_key_vault = azure.keyvault.KeyVault("example",
    name="exampleKVt123",
    location=example.location,
    resource_group_name=example.name,
    tenant_id=current.tenant_id,
    sku_name="standard",
    soft_delete_retention_days=7,
    purge_protection_enabled=True)
server = azure.keyvault.AccessPolicy("server",
    key_vault_id=example_key_vault.id,
    tenant_id=current.tenant_id,
    object_id=example_user_assigned_identity.principal_id,
    key_permissions=[
        "Get",
        "UnwrapKey",
        "WrapKey",
    ],
    secret_permissions=["Get"])
client = azure.keyvault.AccessPolicy("client",
    key_vault_id=example_key_vault.id,
    tenant_id=current.tenant_id,
    object_id=current.object_id,
    key_permissions=[
        "Get",
        "Create",
        "Delete",
        "List",
        "Restore",
        "Recover",
        "UnwrapKey",
        "WrapKey",
        "Purge",
        "Encrypt",
        "Decrypt",
        "Sign",
        "Verify",
        "GetRotationPolicy",
    ],
    secret_permissions=["Get"])
example_key = azure.keyvault.Key("example",
    name="exampleKVkey",
    key_vault_id=example_key_vault.id,
    key_type="RSA",
    key_size=2048,
    key_opts=[
        "decrypt",
        "encrypt",
        "sign",
        "unwrapKey",
        "verify",
        "wrapKey",
    ],
    opts = pulumi.ResourceOptions(depends_on=[
            client,
            server,
        ]))
example_configuration_store = azure.appconfiguration.ConfigurationStore("example",
    name="appConf2",
    resource_group_name=example.name,
    location=example.location,
    sku="standard",
    local_auth_enabled=True,
    public_network_access="Enabled",
    purge_protection_enabled=False,
    soft_delete_retention_days=1,
    identity={
        "type": "UserAssigned",
        "identity_ids": [example_user_assigned_identity.id],
    },
    encryption={
        "key_vault_key_identifier": example_key.id,
        "identity_client_id": example_user_assigned_identity.client_id,
    },
    replicas=[{
        "name": "replica1",
        "location": "West US",
    }],
    tags={
        "environment": "development",
    },
    opts = pulumi.ResourceOptions(depends_on=[
            client,
            server,
        ]))

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/appconfiguration"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/authorization"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/keyvault"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleUserAssignedIdentity, err := authorization.NewUserAssignedIdentity(ctx, "example", &authorization.UserAssignedIdentityArgs{
			Name:              pulumi.String("example-identity"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
		})
		if err != nil {
			return err
		}
		current, err := core.GetClientConfig(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                    pulumi.String("exampleKVt123"),
			Location:                example.Location,
			ResourceGroupName:       example.Name,
			TenantId:                pulumi.String(current.TenantId),
			SkuName:                 pulumi.String("standard"),
			SoftDeleteRetentionDays: pulumi.Int(7),
			PurgeProtectionEnabled:  pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		server, err := keyvault.NewAccessPolicy(ctx, "server", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   exampleUserAssignedIdentity.PrincipalId,
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Get"),
				pulumi.String("UnwrapKey"),
				pulumi.String("WrapKey"),
			},
			SecretPermissions: pulumi.StringArray{
				pulumi.String("Get"),
			},
		})
		if err != nil {
			return err
		}
		client, err := keyvault.NewAccessPolicy(ctx, "client", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   pulumi.String(current.ObjectId),
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Get"),
				pulumi.String("Create"),
				pulumi.String("Delete"),
				pulumi.String("List"),
				pulumi.String("Restore"),
				pulumi.String("Recover"),
				pulumi.String("UnwrapKey"),
				pulumi.String("WrapKey"),
				pulumi.String("Purge"),
				pulumi.String("Encrypt"),
				pulumi.String("Decrypt"),
				pulumi.String("Sign"),
				pulumi.String("Verify"),
				pulumi.String("GetRotationPolicy"),
			},
			SecretPermissions: pulumi.StringArray{
				pulumi.String("Get"),
			},
		})
		if err != nil {
			return err
		}
		exampleKey, err := keyvault.NewKey(ctx, "example", &keyvault.KeyArgs{
			Name:       pulumi.String("exampleKVkey"),
			KeyVaultId: exampleKeyVault.ID(),
			KeyType:    pulumi.String("RSA"),
			KeySize:    pulumi.Int(2048),
			KeyOpts: pulumi.StringArray{
				pulumi.String("decrypt"),
				pulumi.String("encrypt"),
				pulumi.String("sign"),
				pulumi.String("unwrapKey"),
				pulumi.String("verify"),
				pulumi.String("wrapKey"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			client,
			server,
		}))
		if err != nil {
			return err
		}
		_, err = appconfiguration.NewConfigurationStore(ctx, "example", &appconfiguration.ConfigurationStoreArgs{
			Name:                    pulumi.String("appConf2"),
			ResourceGroupName:       example.Name,
			Location:                example.Location,
			Sku:                     pulumi.String("standard"),
			LocalAuthEnabled:        pulumi.Bool(true),
			PublicNetworkAccess:     pulumi.String("Enabled"),
			PurgeProtectionEnabled:  pulumi.Bool(false),
			SoftDeleteRetentionDays: pulumi.Int(1),
			Identity: &appconfiguration.ConfigurationStoreIdentityArgs{
				Type: pulumi.String("UserAssigned"),
				IdentityIds: pulumi.StringArray{
					exampleUserAssignedIdentity.ID(),
				},
			},
			Encryption: &appconfiguration.ConfigurationStoreEncryptionArgs{
				KeyVaultKeyIdentifier: exampleKey.ID(),
				IdentityClientId:      exampleUserAssignedIdentity.ClientId,
			},
			Replicas: appconfiguration.ConfigurationStoreReplicaArray{
				&appconfiguration.ConfigurationStoreReplicaArgs{
					Name:     pulumi.String("replica1"),
					Location: pulumi.String("West US"),
				},
			},
			Tags: pulumi.StringMap{
				"environment": pulumi.String("development"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			client,
			server,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var exampleUserAssignedIdentity = new Azure.Authorization.UserAssignedIdentity("example", new()
    {
        Name = "example-identity",
        Location = example.Location,
        ResourceGroupName = example.Name,
    });

    var current = Azure.Core.GetClientConfig.Invoke();

    var exampleKeyVault = new Azure.KeyVault.KeyVault("example", new()
    {
        Name = "exampleKVt123",
        Location = example.Location,
        ResourceGroupName = example.Name,
        TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
        SkuName = "standard",
        SoftDeleteRetentionDays = 7,
        PurgeProtectionEnabled = true,
    });

    var server = new Azure.KeyVault.AccessPolicy("server", new()
    {
        KeyVaultId = exampleKeyVault.Id,
        TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
        ObjectId = exampleUserAssignedIdentity.PrincipalId,
        KeyPermissions = new[]
        {
            "Get",
            "UnwrapKey",
            "WrapKey",
        },
        SecretPermissions = new[]
        {
            "Get",
        },
    });

    var client = new Azure.KeyVault.AccessPolicy("client", new()
    {
        KeyVaultId = exampleKeyVault.Id,
        TenantId = current.Apply(getClientConfigResult => getClientConfigResult.TenantId),
        ObjectId = current.Apply(getClientConfigResult => getClientConfigResult.ObjectId),
        KeyPermissions = new[]
        {
            "Get",
            "Create",
            "Delete",
            "List",
            "Restore",
            "Recover",
            "UnwrapKey",
            "WrapKey",
            "Purge",
            "Encrypt",
            "Decrypt",
            "Sign",
            "Verify",
            "GetRotationPolicy",
        },
        SecretPermissions = new[]
        {
            "Get",
        },
    });

    var exampleKey = new Azure.KeyVault.Key("example", new()
    {
        Name = "exampleKVkey",
        KeyVaultId = exampleKeyVault.Id,
        KeyType = "RSA",
        KeySize = 2048,
        KeyOpts = new[]
        {
            "decrypt",
            "encrypt",
            "sign",
            "unwrapKey",
            "verify",
            "wrapKey",
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            client,
            server,
        },
    });

    var exampleConfigurationStore = new Azure.AppConfiguration.ConfigurationStore("example", new()
    {
        Name = "appConf2",
        ResourceGroupName = example.Name,
        Location = example.Location,
        Sku = "standard",
        LocalAuthEnabled = true,
        PublicNetworkAccess = "Enabled",
        PurgeProtectionEnabled = false,
        SoftDeleteRetentionDays = 1,
        Identity = new Azure.AppConfiguration.Inputs.ConfigurationStoreIdentityArgs
        {
            Type = "UserAssigned",
            IdentityIds = new[]
            {
                exampleUserAssignedIdentity.Id,
            },
        },
        Encryption = new Azure.AppConfiguration.Inputs.ConfigurationStoreEncryptionArgs
        {
            KeyVaultKeyIdentifier = exampleKey.Id,
            IdentityClientId = exampleUserAssignedIdentity.ClientId,
        },
        Replicas = new[]
        {
            new Azure.AppConfiguration.Inputs.ConfigurationStoreReplicaArgs
            {
                Name = "replica1",
                Location = "West US",
            },
        },
        Tags = 
        {
            { "environment", "development" },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            client,
            server,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.authorization.UserAssignedIdentity;
import com.pulumi.azure.authorization.UserAssignedIdentityArgs;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.keyvault.KeyVault;
import com.pulumi.azure.keyvault.KeyVaultArgs;
import com.pulumi.azure.keyvault.AccessPolicy;
import com.pulumi.azure.keyvault.AccessPolicyArgs;
import com.pulumi.azure.keyvault.Key;
import com.pulumi.azure.keyvault.KeyArgs;
import com.pulumi.azure.appconfiguration.ConfigurationStore;
import com.pulumi.azure.appconfiguration.ConfigurationStoreArgs;
import com.pulumi.azure.appconfiguration.inputs.ConfigurationStoreIdentityArgs;
import com.pulumi.azure.appconfiguration.inputs.ConfigurationStoreEncryptionArgs;
import com.pulumi.azure.appconfiguration.inputs.ConfigurationStoreReplicaArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var exampleUserAssignedIdentity = new UserAssignedIdentity("exampleUserAssignedIdentity", UserAssignedIdentityArgs.builder()
            .name("example-identity")
            .location(example.location())
            .resourceGroupName(example.name())
            .build());

        final var current = CoreFunctions.getClientConfig();

        var exampleKeyVault = new KeyVault("exampleKeyVault", KeyVaultArgs.builder()
            .name("exampleKVt123")
            .location(example.location())
            .resourceGroupName(example.name())
            .tenantId(current.applyValue(getClientConfigResult -> getClientConfigResult.tenantId()))
            .skuName("standard")
            .softDeleteRetentionDays(7)
            .purgeProtectionEnabled(true)
            .build());

        var server = new AccessPolicy("server", AccessPolicyArgs.builder()
            .keyVaultId(exampleKeyVault.id())
            .tenantId(current.applyValue(getClientConfigResult -> getClientConfigResult.tenantId()))
            .objectId(exampleUserAssignedIdentity.principalId())
            .keyPermissions(            
                "Get",
                "UnwrapKey",
                "WrapKey")
            .secretPermissions("Get")
            .build());

        var client = new AccessPolicy("client", AccessPolicyArgs.builder()
            .keyVaultId(exampleKeyVault.id())
            .tenantId(current.applyValue(getClientConfigResult -> getClientConfigResult.tenantId()))
            .objectId(current.applyValue(getClientConfigResult -> getClientConfigResult.objectId()))
            .keyPermissions(            
                "Get",
                "Create",
                "Delete",
                "List",
                "Restore",
                "Recover",
                "UnwrapKey",
                "WrapKey",
                "Purge",
                "Encrypt",
                "Decrypt",
                "Sign",
                "Verify",
                "GetRotationPolicy")
            .secretPermissions("Get")
            .build());

        var exampleKey = new Key("exampleKey", KeyArgs.builder()
            .name("exampleKVkey")
            .keyVaultId(exampleKeyVault.id())
            .keyType("RSA")
            .keySize(2048)
            .keyOpts(            
                "decrypt",
                "encrypt",
                "sign",
                "unwrapKey",
                "verify",
                "wrapKey")
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    client,
                    server)
                .build());

        var exampleConfigurationStore = new ConfigurationStore("exampleConfigurationStore", ConfigurationStoreArgs.builder()
            .name("appConf2")
            .resourceGroupName(example.name())
            .location(example.location())
            .sku("standard")
            .localAuthEnabled(true)
            .publicNetworkAccess("Enabled")
            .purgeProtectionEnabled(false)
            .softDeleteRetentionDays(1)
            .identity(ConfigurationStoreIdentityArgs.builder()
                .type("UserAssigned")
                .identityIds(exampleUserAssignedIdentity.id())
                .build())
            .encryption(ConfigurationStoreEncryptionArgs.builder()
                .keyVaultKeyIdentifier(exampleKey.id())
                .identityClientId(exampleUserAssignedIdentity.clientId())
                .build())
            .replicas(ConfigurationStoreReplicaArgs.builder()
                .name("replica1")
                .location("West US")
                .build())
            .tags(Map.of("environment", "development"))
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    client,
                    server)
                .build());

    }
}

resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  exampleUserAssignedIdentity:
    type: azure:authorization:UserAssignedIdentity
    name: example
    properties:
      name: example-identity
      location: ${example.location}
      resourceGroupName: ${example.name}
  exampleKeyVault:
    type: azure:keyvault:KeyVault
    name: example
    properties:
      name: exampleKVt123
      location: ${example.location}
      resourceGroupName: ${example.name}
      tenantId: ${current.tenantId}
      skuName: standard
      softDeleteRetentionDays: 7
      purgeProtectionEnabled: true
  server:
    type: azure:keyvault:AccessPolicy
    properties:
      keyVaultId: ${exampleKeyVault.id}
      tenantId: ${current.tenantId}
      objectId: ${exampleUserAssignedIdentity.principalId}
      keyPermissions:
        - Get
        - UnwrapKey
        - WrapKey
      secretPermissions:
        - Get
  client:
    type: azure:keyvault:AccessPolicy
    properties:
      keyVaultId: ${exampleKeyVault.id}
      tenantId: ${current.tenantId}
      objectId: ${current.objectId}
      keyPermissions:
        - Get
        - Create
        - Delete
        - List
        - Restore
        - Recover
        - UnwrapKey
        - WrapKey
        - Purge
        - Encrypt
        - Decrypt
        - Sign
        - Verify
        - GetRotationPolicy
      secretPermissions:
        - Get
  exampleKey:
    type: azure:keyvault:Key
    name: example
    properties:
      name: exampleKVkey
      keyVaultId: ${exampleKeyVault.id}
      keyType: RSA
      keySize: 2048
      keyOpts:
        - decrypt
        - encrypt
        - sign
        - unwrapKey
        - verify
        - wrapKey
    options:
      dependson:
        - ${client}
        - ${server}
  exampleConfigurationStore:
    type: azure:appconfiguration:ConfigurationStore
    name: example
    properties:
      name: appConf2
      resourceGroupName: ${example.name}
      location: ${example.location}
      sku: standard
      localAuthEnabled: true
      publicNetworkAccess: Enabled
      purgeProtectionEnabled: false
      softDeleteRetentionDays: 1
      identity:
        type: UserAssigned
        identityIds:
          - ${exampleUserAssignedIdentity.id}
      encryption:
        keyVaultKeyIdentifier: ${exampleKey.id}
        identityClientId: ${exampleUserAssignedIdentity.clientId}
      replicas:
        - name: replica1
          location: West US
      tags:
        environment: development
    options:
      dependson:
        - ${client}
        - ${server}
variables:
  current:
    fn::invoke:
      Function: azure:core:getClientConfig
      Arguments: {}

var configurationStoreResource = new Azure.AppConfiguration.ConfigurationStore("configurationStoreResource", new()
{
    ResourceGroupName = "string",
    Encryption = new Azure.AppConfiguration.Inputs.ConfigurationStoreEncryptionArgs
    {
        IdentityClientId = "string",
        KeyVaultKeyIdentifier = "string",
    },
    Identity = new Azure.AppConfiguration.Inputs.ConfigurationStoreIdentityArgs
    {
        Type = "string",
        IdentityIds = new[]
        {
            "string",
        },
        PrincipalId = "string",
        TenantId = "string",
    },
    LocalAuthEnabled = false,
    Location = "string",
    Name = "string",
    PublicNetworkAccess = "string",
    PurgeProtectionEnabled = false,
    Replicas = new[]
    {
        new Azure.AppConfiguration.Inputs.ConfigurationStoreReplicaArgs
        {
            Location = "string",
            Name = "string",
            Endpoint = "string",
            Id = "string",
        },
    },
    Sku = "string",
    SoftDeleteRetentionDays = 0,
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := appconfiguration.NewConfigurationStore(ctx, "configurationStoreResource", &appconfiguration.ConfigurationStoreArgs{
	ResourceGroupName: pulumi.String("string"),
	Encryption: &appconfiguration.ConfigurationStoreEncryptionArgs{
		IdentityClientId:      pulumi.String("string"),
		KeyVaultKeyIdentifier: pulumi.String("string"),
	},
	Identity: &appconfiguration.ConfigurationStoreIdentityArgs{
		Type: pulumi.String("string"),
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrincipalId: pulumi.String("string"),
		TenantId:    pulumi.String("string"),
	},
	LocalAuthEnabled:       pulumi.Bool(false),
	Location:               pulumi.String("string"),
	Name:                   pulumi.String("string"),
	PublicNetworkAccess:    pulumi.String("string"),
	PurgeProtectionEnabled: pulumi.Bool(false),
	Replicas: appconfiguration.ConfigurationStoreReplicaArray{
		&appconfiguration.ConfigurationStoreReplicaArgs{
			Location: pulumi.String("string"),
			Name:     pulumi.String("string"),
			Endpoint: pulumi.String("string"),
			Id:       pulumi.String("string"),
		},
	},
	Sku:                     pulumi.String("string"),
	SoftDeleteRetentionDays: pulumi.Int(0),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

var configurationStoreResource = new ConfigurationStore("configurationStoreResource", ConfigurationStoreArgs.builder()
    .resourceGroupName("string")
    .encryption(ConfigurationStoreEncryptionArgs.builder()
        .identityClientId("string")
        .keyVaultKeyIdentifier("string")
        .build())
    .identity(ConfigurationStoreIdentityArgs.builder()
        .type("string")
        .identityIds("string")
        .principalId("string")
        .tenantId("string")
        .build())
    .localAuthEnabled(false)
    .location("string")
    .name("string")
    .publicNetworkAccess("string")
    .purgeProtectionEnabled(false)
    .replicas(ConfigurationStoreReplicaArgs.builder()
        .location("string")
        .name("string")
        .endpoint("string")
        .id("string")
        .build())
    .sku("string")
    .softDeleteRetentionDays(0)
    .tags(Map.of("string", "string"))
    .build());

configuration_store_resource = azure.appconfiguration.ConfigurationStore("configurationStoreResource",
    resource_group_name="string",
    encryption={
        "identity_client_id": "string",
        "key_vault_key_identifier": "string",
    },
    identity={
        "type": "string",
        "identity_ids": ["string"],
        "principal_id": "string",
        "tenant_id": "string",
    },
    local_auth_enabled=False,
    location="string",
    name="string",
    public_network_access="string",
    purge_protection_enabled=False,
    replicas=[{
        "location": "string",
        "name": "string",
        "endpoint": "string",
        "id": "string",
    }],
    sku="string",
    soft_delete_retention_days=0,
    tags={
        "string": "string",
    })

const configurationStoreResource = new azure.appconfiguration.ConfigurationStore("configurationStoreResource", {
    resourceGroupName: "string",
    encryption: {
        identityClientId: "string",
        keyVaultKeyIdentifier: "string",
    },
    identity: {
        type: "string",
        identityIds: ["string"],
        principalId: "string",
        tenantId: "string",
    },
    localAuthEnabled: false,
    location: "string",
    name: "string",
    publicNetworkAccess: "string",
    purgeProtectionEnabled: false,
    replicas: [{
        location: "string",
        name: "string",
        endpoint: "string",
        id: "string",
    }],
    sku: "string",
    softDeleteRetentionDays: 0,
    tags: {
        string: "string",
    },
});

type: azure:appconfiguration:ConfigurationStore
properties:
    encryption:
        identityClientId: string
        keyVaultKeyIdentifier: string
    identity:
        identityIds:
            - string
        principalId: string
        tenantId: string
        type: string
    localAuthEnabled: false
    location: string
    name: string
    publicNetworkAccess: string
    purgeProtectionEnabled: false
    replicas:
        - endpoint: string
          id: string
          location: string
          name: string
    resourceGroupName: string
    sku: string
    softDeleteRetentionDays: 0
    tags:
        string: string