VMDiskSecurityProfile Class

Reference

Specifies the security profile settings for the managed disk. Note: It can only be set for Confidential VMs.

Inheritance: azure.mgmt.compute._serialization.Model

VMDiskSecurityProfile

Constructor

VMDiskSecurityProfile(*, security_encryption_type: str | _models.SecurityEncryptionTypes | None = None, disk_encryption_set: _models.DiskEncryptionSetParameters | None = None, **kwargs: Any)

Keyword-Only Parameters

Name	Description
security_encryption_type	str or SecurityEncryptionTypes Specifies the EncryptionType of the managed disk. It is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob, VMGuestStateOnly for encryption of just the VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob.. Note: It can be set for only Confidential VMs. Known values are: "VMGuestStateOnly", "DiskWithVMGuestState", and "NonPersistedTPM".
disk_encryption_set	DiskEncryptionSetParameters Specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.

Name

Description

security_encryption_type

str or SecurityEncryptionTypes

Specifies the EncryptionType of the managed disk. It is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob, VMGuestStateOnly for encryption of just the VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob.. Note: It can be set for only Confidential VMs. Known values are: "VMGuestStateOnly", "DiskWithVMGuestState", and "NonPersistedTPM".

disk_encryption_set

DiskEncryptionSetParameters

Specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.

Variables

Name	Description
security_encryption_type	str or SecurityEncryptionTypes Specifies the EncryptionType of the managed disk. It is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob, VMGuestStateOnly for encryption of just the VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob.. Note: It can be set for only Confidential VMs. Known values are: "VMGuestStateOnly", "DiskWithVMGuestState", and "NonPersistedTPM".
disk_encryption_set	DiskEncryptionSetParameters Specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.