Update Microsoft.Sql ARM API with "format: arm-id" where appropriate and x-ms-secret where appropriate

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/DatabaseExtensions.json

@@ -399,13 +399,15 @@
         "storageAccountResourceId": {
           "description": "The resource id for the storage account used to store BACPAC file. If set, private endpoint connection will be created for the storage account. Must match storage account used for StorageUri parameter.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "sqlServerResourceId": {
           "description": "The resource id for the SQL server which is the target of this request. If set, private endpoint connection will be created for the SQL server. Must match server which is target of the operation.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/DatabaseSecurityAlertPolicies.json

@@ -298,6 +298,7 @@
         },
         "storageAccountAccessKey": {
           "description": "Specifies the identifier key of the Threat Detection audit storage account.",
+          "x-ms-secret": true,
           "type": "string"
         },
         "retentionDays": {

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/DatabaseVulnerabilityAssessments.json

@@ -311,6 +311,7 @@
         "storageContainerSasKey": {
           "description": "A shared access signature (SAS Key) that has write access to the blob container specified in 'storageContainerPath' parameter. If 'storageAccountAccessKey' isn't specified, StorageContainerSasKey is required. Applies only if the storage account is not behind a Vnet or a firewall",
           "type": "string",
+          "x-ms-secret": true,
           "x-ms-mutability": [
             "create",
             "update"
@@ -319,6 +320,7 @@
         "storageAccountAccessKey": {
           "description": "Specifies the identifier key of the storage account for vulnerability assessment scan results. If 'StorageContainerSasKey' isn't specified, storageAccountAccessKey is required. Applies only if the storage account is not behind a Vnet or a firewall",
           "type": "string",
+          "x-ms-secret": true,
           "x-ms-mutability": [
             "create",
             "update"

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/Databases.json

@@ -926,11 +926,20 @@
         },
         "elasticPoolId": {
           "description": "The resource identifier of the elastic pool containing this database.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.Sql/servers/elasticPools"
+              }
+            ]
+          }
         },
         "sourceDatabaseId": {
           "description": "The resource identifier of the source database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1021,27 +1030,38 @@
         "recoveryServicesRecoveryPointId": {
           "description": "The resource identifier of the recovery point associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "longTermRetentionBackupResourceId": {
           "description": "The resource identifier of the long term retention backup associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.Sql/locations/longTermRetentionBackups"
+              }
+            ]
+          },
           "x-ms-mutability": [
             "create"
           ]
         },
         "recoverableDatabaseId": {
           "description": "The resource identifier of the recoverable database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "restorableDroppedDatabaseId": {
           "description": "The resource identifier of the restorable dropped database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1200,6 +1220,7 @@
         "sourceResourceId": {
           "description": "The resource identifier of the source associated with the create operation of this database.\r\n\r\nThis property is only supported for DataWarehouse edition and allows to restore across subscriptions.\r\n\r\nWhen sourceResourceId is specified, sourceDatabaseId, recoverableDatabaseId, restorableDroppedDatabaseId and sourceDatabaseDeletionDate must not be specified and CreateMode must be PointInTimeRestore, Restore or Recover.\r\n\r\nWhen createMode is PointInTimeRestore, sourceResourceId must be the resource ID of the existing database or existing sql pool, and restorePointInTime must be specified.\r\n\r\nWhen createMode is Restore, sourceResourceId must be the resource ID of restorable dropped database or restorable dropped sql pool.\r\n\r\nWhen createMode is Recover, sourceResourceId must be the resource ID of recoverable database or recoverable sql pool.\r\n\r\nWhen source subscription belongs to a different tenant than target subscription, “x-ms-authorization-auxiliary” header must contain authentication token for the source tenant. For more details about “x-ms-authorization-auxiliary” header see https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/authenticate-multi-tenant ",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1290,11 +1311,20 @@
         },
         "elasticPoolId": {
           "description": "The resource identifier of the elastic pool containing this database.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.Sql/servers/elasticPools"
+              }
+            ]
+          }
         },
         "sourceDatabaseId": {
           "description": "The resource identifier of the source database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1385,13 +1415,22 @@
         "recoveryServicesRecoveryPointId": {
           "description": "The resource identifier of the recovery point associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "longTermRetentionBackupResourceId": {
           "description": "The resource identifier of the long term retention backup associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.Sql/locations/longTermRetentionBackups"
+              }
+            ]
+          },
           "x-ms-mutability": [
             "create"
           ]
@@ -1406,6 +1445,7 @@
         "restorableDroppedDatabaseId": {
           "description": "The resource identifier of the restorable dropped database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1806,13 +1846,15 @@
         "storageAccountResourceId": {
           "description": "The resource id for the storage account used to store BACPAC file. If set, private endpoint connection will be created for the storage account. Must match storage account used for StorageUri parameter.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "sqlServerResourceId": {
           "description": "The resource id for the SQL server which is the target of this request. If set, private endpoint connection will be created for the SQL server. Must match server which is target of the operation.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/FailoverGroups.json

@@ -498,7 +498,15 @@
           "description": "List of databases in the failover group.",
           "type": "array",
           "items": {
-            "type": "string"
+            "type": "string",
+            "format": "arm-id",
+            "x-ms-arm-id-details": {
+              "allowedResources": [
+                {
+                  "type": "Microsoft.Sql/servers/databases"
+                }
+              ]
+            }
           }
         }
       }
@@ -595,6 +603,7 @@
       "properties": {
         "id": {
           "description": "Resource identifier of the partner server.",
+          "format": "arm-id",
           "type": "string"
         },
         "location": {

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/JobAgents.json

@@ -326,6 +326,7 @@
         "databaseId": {
           "description": "Resource ID of the database to store job metadata in.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "read",
             "create"

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/ManagedDatabases.json

@@ -589,7 +589,8 @@
       "properties": {
         "destinationManagedDatabaseId": {
           "description": "The destination managed database ID",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id"
         }
       }
     },
@@ -692,13 +693,15 @@
         "sourceDatabaseId": {
           "description": "The resource identifier of the source database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "restorableDroppedDatabaseId": {
           "description": "The restorable dropped database resource id to restore when creating this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -718,13 +721,15 @@
         "recoverableDatabaseId": {
           "description": "The resource identifier of the recoverable database associated with create operation of this database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "longTermRetentionBackupResourceId": {
           "description": "The name of the Long Term Retention backup to be used for restore of this managed database.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -754,7 +759,8 @@
       "properties": {
         "destinationManagedDatabaseId": {
           "description": "The destination managed database ID",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id"
         },
         "operationMode": {
           "description": "The move operation mode.",

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/ManagedInstances.json

@@ -863,7 +863,15 @@
         },
         "subnetId": {
           "description": "Subnet resource ID for the managed instance.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.Network/virtualNetworks/subnets"
+              }
+            ]
+          }
         },
         "state": {
           "description": "The state of the managed instance.",
@@ -907,6 +915,7 @@
         },
         "dnsZonePartner": {
           "description": "The resource id of another managed instance whose DNS zone this managed instance will share after creation.",
+          "format": "arm-id",
           "type": "string",
           "x-ms-mutability": [
             "create"
@@ -919,6 +928,7 @@
         "sourceManagedInstanceId": {
           "description": "The resource identifier of the source managed instance associated with create operation of this instance.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -1011,7 +1021,15 @@
         },
         "primaryUserAssignedIdentityId": {
           "description": "The resource id of a user assigned identity to be used by default.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.ManagedIdentity/userAssignedIdentities"
+              }
+            ]
+          }
         },
         "keyId": {
           "description": "A CMK URI of the key to use for encryption.",

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/ServerSecurityAlertPolicies.json

@@ -242,6 +242,7 @@
         },
         "storageAccountAccessKey": {
           "description": "Specifies the identifier key of the Threat Detection audit storage account.",
+          "x-ms-secret": true,
           "type": "string"
         },
         "retentionDays": {

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/ServerVulnerabilityAssessments.json

@@ -298,6 +298,7 @@
         "storageContainerSasKey": {
           "description": "A shared access signature (SAS Key) that has write access to the blob container specified in 'storageContainerPath' parameter. If 'storageAccountAccessKey' isn't specified, StorageContainerSasKey is required. Applies only if the storage account is not behind a Vnet or a firewall",
           "type": "string",
+          "x-ms-secret": true,
           "x-ms-mutability": [
             "create",
             "update"
@@ -306,6 +307,7 @@
         "storageAccountAccessKey": {
           "description": "Specifies the identifier key of the storage account for vulnerability assessment scan results. If 'StorageContainerSasKey' isn't specified, storageAccountAccessKey is required. Applies only if the storage account is not behind a Vnet or a firewall",
           "type": "string",
+          "x-ms-secret": true,
           "x-ms-mutability": [
             "create",
             "update"

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/Servers.json

@@ -651,13 +651,15 @@
         "storageAccountResourceId": {
           "description": "The resource id for the storage account used to store BACPAC file. If set, private endpoint connection will be created for the storage account. Must match storage account used for StorageUri parameter.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
         },
         "sqlServerResourceId": {
           "description": "The resource id for the SQL server which is the target of this request. If set, private endpoint connection will be created for the SQL server. Must match server which is target of the operation.",
           "type": "string",
+          "format": "arm-id",
           "x-ms-mutability": [
             "create"
           ]
@@ -957,7 +959,15 @@
         },
         "primaryUserAssignedIdentityId": {
           "description": "The resource id of a user assigned identity to be used by default.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id",
+          "x-ms-arm-id-details": {
+            "allowedResources": [
+              {
+                "type": "Microsoft.ManagedIdentity/userAssignedIdentities"
+              }
+            ]
+          }
         },
         "federatedClientId": {
           "format": "uuid",

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/SyncAgents.json

@@ -475,7 +475,8 @@
         },
         "syncDatabaseId": {
           "description": "ARM resource id of the sync database in the sync agent.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id"
         },
         "lastAliveTime": {
           "format": "date-time",

specification/sql/resource-manager/Microsoft.Sql/stable/2021-11-01/SyncGroups.json

@@ -938,7 +938,8 @@
         },
         "syncDatabaseId": {
           "description": "ARM resource id of the sync database in the sync group.",
-          "type": "string"
+          "type": "string",
+          "format": "arm-id"
         },
         "hubDatabaseUserName": {
           "description": "User name for the sync group hub database credential.",