Share via


Microsoft.Network networkSecurityPerimeters/links

Bicep resource definition

The networkSecurityPerimeters/links resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/networkSecurityPerimeters/links resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Network/networkSecurityPerimeters/links@2025-05-01' = {
  parent: resourceSymbolicName
  name: 'string'
  properties: {
    autoApprovedRemotePerimeterResourceId: 'string'
    description: 'string'
    localInboundProfiles: [
      'string'
    ]
    remoteInboundProfiles: [
      'string'
    ]
  }
}

Property Values

Name Description Value
name The resource name string

Constraints:
Max length = 80
Pattern = (^[a-zA-Z0-9]+[a-zA-Z0-9_.-]*[a-zA-Z0-9_]+$)|(^[a-zA-Z0-9]$) (required)
parent In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource.

For more information, see Child resource outside parent resource.
Symbolic name for resource of type: networkSecurityPerimeters
properties Properties of the network security perimeter link resource. NspLinkProperties

NspLinkProperties

Name Description Value
autoApprovedRemotePerimeterResourceId Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource. string
description A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars. string
localInboundProfiles Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. string[]
remoteInboundProfiles Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode. string[]

ARM template resource definition

The networkSecurityPerimeters/links resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/networkSecurityPerimeters/links resource, add the following JSON to your template.

{
  "type": "Microsoft.Network/networkSecurityPerimeters/links",
  "apiVersion": "2025-05-01",
  "name": "string",
  "properties": {
    "autoApprovedRemotePerimeterResourceId": "string",
    "description": "string",
    "localInboundProfiles": [ "string" ],
    "remoteInboundProfiles": [ "string" ]
  }
}

Property Values

Name Description Value
apiVersion The api version '2025-05-01'
name The resource name string

Constraints:
Max length = 80
Pattern = (^[a-zA-Z0-9]+[a-zA-Z0-9_.-]*[a-zA-Z0-9_]+$)|(^[a-zA-Z0-9]$) (required)
properties Properties of the network security perimeter link resource. NspLinkProperties
type The resource type 'Microsoft.Network/networkSecurityPerimeters/links'

NspLinkProperties

Name Description Value
autoApprovedRemotePerimeterResourceId Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource. string
description A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars. string
localInboundProfiles Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. string[]
remoteInboundProfiles Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode. string[]

Usage Examples

Terraform (AzAPI provider) resource definition

The networkSecurityPerimeters/links resource type can be deployed with operations that target:

  • Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/networkSecurityPerimeters/links resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Network/networkSecurityPerimeters/links@2025-05-01"
  name = "string"
  parent_id = "string"
  body = {
    properties = {
      autoApprovedRemotePerimeterResourceId = "string"
      description = "string"
      localInboundProfiles = [
        "string"
      ]
      remoteInboundProfiles = [
        "string"
      ]
    }
  }
}

Property Values

Name Description Value
name The resource name string

Constraints:
Max length = 80
Pattern = (^[a-zA-Z0-9]+[a-zA-Z0-9_.-]*[a-zA-Z0-9_]+$)|(^[a-zA-Z0-9]$) (required)
parent_id The ID of the resource that is the parent for this resource. ID for resource of type: networkSecurityPerimeters
properties Properties of the network security perimeter link resource. NspLinkProperties
type The resource type "Microsoft.Network/networkSecurityPerimeters/links@2025-05-01"

NspLinkProperties

Name Description Value
autoApprovedRemotePerimeterResourceId Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource. string
description A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars. string
localInboundProfiles Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. string[]
remoteInboundProfiles Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode. string[]