Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Bicep resource definition
The deploymentSafeguards resource type can be deployed with operations that target:
- Tenant - See tenant deployment commands* Management groups - See management group deployment commands* Subscription - See subscription deployment commands* Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.ContainerService/deploymentSafeguards resource, add the following Bicep to your template.
resource symbolicname 'Microsoft.ContainerService/deploymentSafeguards@2025-04-01' = {
scope: resourceSymbolicName or scope
name: 'default'
properties: {
excludedNamespaces: [
'string'
]
level: 'string'
}
}
Property Values
Microsoft.ContainerService/deploymentSafeguards
| Name | Description | Value |
|---|---|---|
| name | The resource name | 'default' (required) |
| properties | The resource-specific properties for this resource. | DeploymentSafeguardsProperties |
| scope | Use when creating a resource at a scope that is different than the deployment scope. | Set this property to the symbolic name of a resource to apply the extension resource. |
DeploymentSafeguardsProperties
| Name | Description | Value |
|---|---|---|
| excludedNamespaces | User defined list of namespaces to exclude from Deployment Safeguards. Deployments in these namespaces will not be checked against any safeguards | string[] |
| level | The deployment safeguards level. Possible values are Warn and Enforce | 'Enforce' 'Warn' (required) |
ARM template resource definition
The deploymentSafeguards resource type can be deployed with operations that target:
- Tenant - See tenant deployment commands* Management groups - See management group deployment commands* Subscription - See subscription deployment commands* Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.ContainerService/deploymentSafeguards resource, add the following JSON to your template.
{
"type": "Microsoft.ContainerService/deploymentSafeguards",
"apiVersion": "2025-04-01",
"name": "string",
"properties": {
"excludedNamespaces": [ "string" ],
"level": "string"
}
}
Property Values
Microsoft.ContainerService/deploymentSafeguards
| Name | Description | Value |
|---|---|---|
| apiVersion | The api version | '2025-04-01' |
| name | The resource name | 'default' (required) |
| properties | The resource-specific properties for this resource. | DeploymentSafeguardsProperties |
| type | The resource type | 'Microsoft.ContainerService/deploymentSafeguards' |
DeploymentSafeguardsProperties
| Name | Description | Value |
|---|---|---|
| excludedNamespaces | User defined list of namespaces to exclude from Deployment Safeguards. Deployments in these namespaces will not be checked against any safeguards | string[] |
| level | The deployment safeguards level. Possible values are Warn and Enforce | 'Enforce' 'Warn' (required) |
Usage Examples
Terraform (AzAPI provider) resource definition
The deploymentSafeguards resource type can be deployed with operations that target:
- Tenant* Management groups* Subscription* Resource groups
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.ContainerService/deploymentSafeguards resource, add the following Terraform to your template.
resource "azapi_resource" "symbolicname" {
type = "Microsoft.ContainerService/deploymentSafeguards@2025-04-01"
name = "string"
parent_id = "string"
body = {
properties = {
excludedNamespaces = [
"string"
]
level = "string"
}
}
}
Property Values
Microsoft.ContainerService/deploymentSafeguards
| Name | Description | Value |
|---|---|---|
| name | The resource name | 'default' (required) |
| parent_id | The ID of the resource to apply this extension resource to. | string (required) |
| properties | The resource-specific properties for this resource. | DeploymentSafeguardsProperties |
| type | The resource type | "Microsoft.ContainerService/deploymentSafeguards@2025-04-01" |
DeploymentSafeguardsProperties
| Name | Description | Value |
|---|---|---|
| excludedNamespaces | User defined list of namespaces to exclude from Deployment Safeguards. Deployments in these namespaces will not be checked against any safeguards | string[] |
| level | The deployment safeguards level. Possible values are Warn and Enforce | 'Enforce' 'Warn' (required) |