[DataFactory]: Add CMK Properties (#10867)

* [DataFactory]: Add CMK Properties * Prettier validation * Model Identity Type as string * RemoveEnumChanges
Azure · Dec 4, 2020 · 0b23a99 · 0b23a99
1 parent 0269d92
commit 0b23a99
Showing 1 changed file with 55 additions and 1 deletion.
diff --git a/...ion/datafactory/resource-manager/Microsoft.DataFactory/stable/2018-06-01/datafactory.json b/...ion/datafactory/resource-manager/Microsoft.DataFactory/stable/2018-06-01/datafactory.json
@@ -4887,6 +4887,10 @@
           "$ref": "#/definitions/GlobalParameterDefinitionSpecification",
           "description": "List of parameters for factory."
         },
+        "encryption": {
+          "$ref": "#/definitions/EncryptionConfiguration",
+          "description": "Properties to enable Customer Managed Key for the factory."
+        },
         "publicNetworkAccess": {
           "description": "Whether or not public network access is allowed for the data factory.",
           "enum": [
@@ -4901,6 +4905,40 @@
         }
       }
     },
+    "EncryptionConfiguration": {
+      "description": "Definition of CMK for the factory.",
+      "properties": {
+        "keyName": {
+          "type": "string",
+          "description": "The name of the key in Azure Key Vault to use as Customer Managed Key."
+        },
+        "vaultBaseUrl": {
+          "type": "string",
+          "description": "The url of the Azure Key Vault used for CMK."
+        },
+        "keyVersion": {
+          "type": "string",
+          "description": "The version of the key used for CMK. If not provided, latest version will be used."
+        },
+        "identity": {
+          "$ref": "#/definitions/CMKIdentityDefinition",
+          "description": "User assigned identity to use to authenticate to customer's key vault. If not provided Managed Service Identity will be used."
+        }
+      },
+      "required": [
+        "keyName",
+        "vaultBaseUrl"
+      ]
+    },
+    "CMKIdentityDefinition": {
+      "description": "Managed Identity used for CMK.",
+      "properties": {
+        "userAssignedIdentity": {
+          "type": "string",
+          "description": "The resource id of the user assigned identity to authenticate to customer's key vault."
+        }
+      }
+    },
     "GlobalParameterDefinitionSpecification": {
       "description": "Definition of all parameters for an entity.",
       "type": "object",
@@ -5058,7 +5096,7 @@
       "properties": {
         "type": {
           "type": "string",
-          "description": "The identity type. Currently the only supported type is 'SystemAssigned'.",
+          "description": "The identity type.",
           "enum": [
             "SystemAssigned"
           ],
@@ -5078,12 +5116,28 @@
           "format": "uuid",
           "readOnly": true,
           "description": "The client tenant id of the identity."
+        },
+        "userAssignedIdentities": {
+          "$ref": "#/definitions/UserAssignedIdentitiesDefinitionSpecification",
+          "description": "List of user assigned identities for the factory."
         }
       },
       "required": [
         "type"
       ]
     },
+    "UserAssignedIdentitiesDefinitionSpecification": {
+      "description": "Definition of all user assigned identities for a factory.",
+      "type": "object",
+      "additionalProperties": {
+        "$ref": "#/definitions/UserAssignedIdentitySpecification"
+      }
+    },
+    "UserAssignedIdentitySpecification": {
+      "description": "Definition of a single user assigned identity for a factory.",
+      "type": "object",
+      "properties": {}
+    },
     "DatasetReference": {
       "description": "Dataset reference type.",
       "properties": {