Microsoft.MachineLearningServices workspaces/datastores 2023-04-01

Article
12/09/2024

Bicep resource definition

The workspaces/datastores resource type can be deployed with operations that target:

Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.MachineLearningServices/workspaces/datastores resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.MachineLearningServices/workspaces/datastores@2023-04-01' = {
  parent: resourceSymbolicName
  name: 'string'
  properties: {
    credentials: {
      credentialsType: 'string'
      // For remaining properties, see DatastoreCredentials objects
    }
    description: 'string'
    properties: {
      {customized property}: 'string'
    }
    tags: {
      {customized property}: 'string'
    }
    datastoreType: 'string'
    // For remaining properties, see DatastoreProperties objects
  }
}

DatastoreCredentials objects

Set the credentialsType property to specify the type of object.

For AccountKey, use:

{
  credentialsType: 'AccountKey'
  secrets: {
    key: 'string'
    secretsType: 'string'
  }
}

For Certificate, use:

{
  authorityUrl: 'string'
  clientId: 'string'
  credentialsType: 'Certificate'
  resourceUrl: 'string'
  secrets: {
    certificate: 'string'
    secretsType: 'string'
  }
  tenantId: 'string'
  thumbprint: 'string'
}

For None, use:

{
  credentialsType: 'None'
}

For Sas, use:

{
  credentialsType: 'Sas'
  secrets: {
    sasToken: 'string'
    secretsType: 'string'
  }
}

For ServicePrincipal, use:

{
  authorityUrl: 'string'
  clientId: 'string'
  credentialsType: 'ServicePrincipal'
  resourceUrl: 'string'
  secrets: {
    clientSecret: 'string'
    secretsType: 'string'
  }
  tenantId: 'string'
}

DatastoreProperties objects

Set the datastoreType property to specify the type of object.

For AzureBlob, use:

{
  accountName: 'string'
  containerName: 'string'
  datastoreType: 'AzureBlob'
  endpoint: 'string'
  protocol: 'string'
  serviceDataAccessAuthIdentity: 'string'
}

For AzureDataLakeGen1, use:

{
  datastoreType: 'AzureDataLakeGen1'
  serviceDataAccessAuthIdentity: 'string'
  storeName: 'string'
}

For AzureDataLakeGen2, use:

{
  accountName: 'string'
  datastoreType: 'AzureDataLakeGen2'
  endpoint: 'string'
  filesystem: 'string'
  protocol: 'string'
  serviceDataAccessAuthIdentity: 'string'
}

For AzureFile, use:

{
  accountName: 'string'
  datastoreType: 'AzureFile'
  endpoint: 'string'
  fileShareName: 'string'
  protocol: 'string'
  serviceDataAccessAuthIdentity: 'string'
}

Property values

AccountKeyDatastoreCredentials

Name	Description	Value
credentialsType	[Required] Credential type used to authentication with storage.	'AccountKey' (required)
secrets	[Required] Storage account secrets.	AccountKeyDatastoreSecrets (required)

AccountKeyDatastoreSecrets

Name	Description	Value
key	Storage account key.	string
secretsType	[Required] Credential type used to authentication with storage.	'AccountKey' 'Certificate' 'Sas' 'ServicePrincipal' (required)

AzureBlobDatastore

Name	Description	Value
accountName	Storage account name.	string
containerName	Storage account container name.	string
datastoreType	[Required] Storage type backing the datastore.	'AzureBlob' (required)
endpoint	Azure cloud endpoint for the storage account.	string
protocol	Protocol used to communicate with the storage account.	string
serviceDataAccessAuthIdentity	Indicates which identity to use to authenticate service data access to customer's storage.	'None' 'WorkspaceSystemAssignedIdentity' 'WorkspaceUserAssignedIdentity'

AzureDataLakeGen1Datastore

Name	Description	Value
datastoreType	[Required] Storage type backing the datastore.	'AzureDataLakeGen1' (required)
serviceDataAccessAuthIdentity	Indicates which identity to use to authenticate service data access to customer's storage.	'None' 'WorkspaceSystemAssignedIdentity' 'WorkspaceUserAssignedIdentity'
storeName	[Required] Azure Data Lake store name.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)

AzureDataLakeGen2Datastore

Name	Description	Value
accountName	[Required] Storage account name.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)
datastoreType	[Required] Storage type backing the datastore.	'AzureDataLakeGen2' (required)
endpoint	Azure cloud endpoint for the storage account.	string
filesystem	[Required] The name of the Data Lake Gen2 filesystem.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)
protocol	Protocol used to communicate with the storage account.	string
serviceDataAccessAuthIdentity	Indicates which identity to use to authenticate service data access to customer's storage.	'None' 'WorkspaceSystemAssignedIdentity' 'WorkspaceUserAssignedIdentity'

AzureFileDatastore

Name	Description	Value
accountName	[Required] Storage account name.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)
datastoreType	[Required] Storage type backing the datastore.	'AzureFile' (required)
endpoint	Azure cloud endpoint for the storage account.	string
fileShareName	[Required] The name of the Azure file share that the datastore points to.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)
protocol	Protocol used to communicate with the storage account.	string
serviceDataAccessAuthIdentity	Indicates which identity to use to authenticate service data access to customer's storage.	'None' 'WorkspaceSystemAssignedIdentity' 'WorkspaceUserAssignedIdentity'

CertificateDatastoreCredentials

Name	Description	Value
authorityUrl	Authority URL used for authentication.	string
clientId	[Required] Service principal client ID.	string Constraints: Min length = 36 Max length = 36 Pattern = `^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$` (required)
credentialsType	[Required] Credential type used to authentication with storage.	'Certificate' (required)
resourceUrl	Resource the service principal has access to.	string
secrets	[Required] Service principal secrets.	CertificateDatastoreSecrets (required)
tenantId	[Required] ID of the tenant to which the service principal belongs.	string Constraints: Min length = 36 Max length = 36 Pattern = `^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$` (required)
thumbprint	[Required] Thumbprint of the certificate used for authentication.	string Constraints: Min length = 1 Pattern = `[a-zA-Z0-9_]` (required)

CertificateDatastoreSecrets

Name	Description	Value
certificate	Service principal certificate.	string
secretsType	[Required] Credential type used to authentication with storage.	'AccountKey' 'Certificate' 'Sas' 'ServicePrincipal' (required)

DatastoreCredentials

Name	Description	Value
credentialsType	Set to 'AccountKey' for type AccountKeyDatastoreCredentials. Set to 'Certificate' for type CertificateDatastoreCredentials. Set to 'None' for type NoneDatastoreCredentials. Set to 'Sas' for type SasDatastoreCredentials. Set to 'ServicePrincipal' for type ServicePrincipalDatastoreCredentials.	'AccountKey' 'Certificate' 'None' 'Sas' 'ServicePrincipal' (required)

DatastoreProperties

Name	Description	Value
credentials	[Required] Account credentials.	DatastoreCredentials (required)
datastoreType	Set to 'AzureBlob' for type AzureBlobDatastore. Set to 'AzureDataLakeGen1' for type AzureDataLakeGen1Datastore. Set to 'AzureDataLakeGen2' for type AzureDataLakeGen2Datastore. Set to 'AzureFile' for type AzureFileDatastore.	'AzureBlob' 'AzureDataLakeGen1' 'AzureDataLakeGen2' 'AzureFile' (required)
description	The asset description text.	string
properties	The asset property dictionary.	ResourceBaseProperties
tags	Tag dictionary. Tags can be added, removed, and updated.	ResourceBaseTags