| AZURE::Authorization::RoleAssignment | ✅ | ✅ | |
| AZURE::Compute::Disk | ✅ | ✅ | |
| AZURE::Compute::VirtualMachine | ✅ | ✅ | |
| AZURE::Compute::VirtualMachineScaleSet | ✅ | ✅ | |
| AZURE::ContainerRegistry::Registry | ✅ | ✅ | |
| AZURE::ContainerService::MaintenanceConfiguration | ✅ | ✅ | |
| AZURE::ContainerService::ManagedCluster | ✅ | ✅ | |
| AZURE::ContainerService::TrustedAccessRoleBinding | ✅ | ✅ | |
| AZURE::DBforPostgreSQL::Configuration | ✅ | ✅ | Server parameters (e.g. extensions) |
| AZURE::DBforPostgreSQL::Database | ✅ | ✅ | |
| AZURE::DBforPostgreSQL::FirewallRule | ✅ | ✅ | |
| AZURE::DBforPostgreSQL::FlexibleServer | ✅ | ✅ | |
| AZURE::KeyVault::Secret | ✅ | ✅ | Write-only value; opaque rotation and set-once |
| AZURE::KeyVault::Vault | ✅ | ✅ | |
| AZURE::KubernetesConfiguration::Extension | ✅ | ✅ | |
| AZURE::KubernetesConfiguration::FluxConfiguration | ✅ | ✅ | |
| AZURE::ManagedIdentity::FederatedIdentityCredential | ✅ | ✅ | Workload identity / OIDC |
| AZURE::ManagedIdentity::UserAssignedIdentity | ✅ | ✅ | |
| AZURE::Network::LoadBalancer | ✅ | ✅ | |
| AZURE::Network::NetworkInterface | ✅ | ✅ | |
| AZURE::Network::NetworkSecurityGroup | ✅ | ✅ | |
| AZURE::Network::PrivateDnsZone | ✅ | ✅ | |
| AZURE::Network::PrivateDnsZoneGroup | ✅ | ✅ | |
| AZURE::Network::PrivateDnsZoneVirtualNetworkLink | ✅ | ✅ | |
| AZURE::Network::PrivateEndpoint | ✅ | ✅ | |
| AZURE::Network::PublicIPAddress | ✅ | ✅ | |
| AZURE::Network::Subnet | ✅ | ✅ | |
| AZURE::Network::VirtualNetwork | ✅ | ✅ | |
| AZURE::Resources::ResourceGroup | ✅ | ✅ | |
| AZURE::Sql::Database | ✅ | ✅ | |
| AZURE::Sql::FirewallRule | ✅ | ✅ | |
| AZURE::Sql::Server | ✅ | ✅ | |
| AZURE::Sql::ServerAzureADAdministrator | ✅ | ✅ | Azure AD admin for a SQL server |
| AZURE::Storage::BlobContainer | ✅ | ✅ | |
| AZURE::Storage::StorageAccount | ✅ | ✅ | |
