ENHANCEMENTS:
go-azure-sdk - update to v0.20250520.1180806 (#29665)azurerm_managed_disk - add support for location (#29513)azurerm_dns_caa_record - add support for the contactemail value in the tag property (#29664)azurerm_eventhub_namespace_schema_group - add support for the Json value in the schema_type property (#29641)azurerm_function_app_flex_consumption - add support for the always_ready block (#29023)azurerm_security_center_subscription_pricing - add support for the AI value for the resource_type property (#29631)FEATURES:
azurerm_system_center_virtual_machine_manager_virtual_machine_instance_guest_agent (#28953)ENHANCEMENTS:
azurerm_api_management_api - fix import of resources (#28193)azurerm_app_configuration - add support for developer tier to the sku property (#29492)azurerm_app_configuration - the sku property can now be downgraded from premium to standard without recreating the resource (#29492)azurerm_key_vault_managed_hardware_security_module_key - add support for the import value in the key_opts property (#29524)azurerm_netapp_pool - add support for cool_access_enabled (#29468)azurerm_network_manager_deployment - add support for the Routing value in the scope_access property (#29536)azurerm_private_endpoint_application_security_group_association - resource is now removed from state if it no longer exist (#29601)azurerm_virtual_machine_implicit_data_disk_from_source - the disk_size_gb property can now be increased without recreating the resource (#29239)azurerm_web_application_firewall_policy - add support for the JSChallenge in the action property (#29614)BUG FIXES:
FEATURES:
ENHANCEMENTS:
azurerm_mssql_database - Update to API version 2023-08-01-preview/replicationlinks (#28705)azurerm_mssql_server_security_alert_policy - update to API version 2023-08-01-preview/serversecurityalertpolicies (#29363)eventhub - update to API version 2024-01-01 (#29397)azurerm_shared_image_version - update to API version 2024-03-01 (#28954)azurerm_ai_foundry_project - add support for the primary_user_assigned_identity property (#29197)azurerm_storage_account_static_website - the index_document property now has validation for length and excluding slashes (#29431)BUG FIXES:
azurerm_application_insights - the workspace_id is now Computed (#29396)azurerm_batch_pool - prevent error when certificate is not used (#29443)azurerm_nginx_deployment - add support for the web_application_firewall property (#27454)azurerm_postgresql_flexible_server_virtual_endpoint - is no longer removed from state when a fail-over occurs (#29424)azurerm_servicebus_queue - no longer waits on resource creation (#29435)azurerm_virtual_network_gateway - prevent a panic when vpn_client_configuration is removed from from the configuration (#29456)azurerm_web_pubsub_custom_certificate - no longer crashes when custom_certificate_id is in a different subscription (#29410)azurerm_windows_web_app - fix perpetual diff around incorrect default for always_on and ignore default values for logs.0.application_logs (#29150)azurerm_windows_web_app_slot - fix perpetual diff around incorrect default for always_on and ignore default values for logs.0.application_logs (#29150)FEATURES:
azurerm_eventgrid_partner_configuration (#28676)ENHANCEMENTS:
go-azure-sdk to v0.20250409.1192141 (#29307)containerapps - update to API version 2025-01-01 (#29296)netapp - update to API version 2025-01-01 (#29382)operationalinsights - partial update to API version 2023-09-01 (#29283)azurerm_cdn_frontdoor_origin - support managedEnvironments value for private_link.target_type (#28239)azurerm_cdn_frontdoor_origin - add support for the web_secondary Gateway values in the private_link.target_type property (#29380)azurerm_cognitive_deployment - add support for the Cohere value in the model.format property (#29143)azurerm_container_app_environment: add support for cross subscription log_analytics_workspace_id (#28740)azurerm_dev_center_project - add support for the identity property (#29278)azurerm_dynatrace_tag_rules - the log_rule and metric_rule blocks and their properties are no longer ForceNew (#29298)azurerm_monitor_data_collection_endpoint - add support for the metrics_ingestion_endpoint attribute (#29292)azurerm_mysql_flexible_server - support for the log_on_disk_enabled property (#28929)azurerm_subnet - add support for the Microsoft.PowerAutomate/hostedRpa value in the delegation.service_delegation.name property (#29271)azurerm_subnet - add support for the Microsoft.Network/applicationGateways value in the delegation.service_delegation.name property (#29361)azurerm_virtual_network - add support for the Microsoft.PowerAutomate/hostedRpa value in the subnet.delegation.service_delegation.name property (#29271)azurerm_virtual_network - add support for the Microsoft.Network/applicationGateways value in the subnet.delegation.service_delegation.name property (#29361)BUG FIXES:
x-ms-correlation-request-id header is only set once during list operations (#28974)azurerm_app_configuration_feature - suppress casing differences for configuration_store_id to prevent resource recreation (#29285)azurerm_app_configuration_key - suppress casing differences for configuration_store_id to prevent resource recreation (#29285)azurerm_container_app_environment - updates are now made using the PATCH method, preventing errors due to missing properties in the request (#29317)azurerm_eventhub_namespace - remove max items from network/ip rules as they can be increased above upon request (#29333)azurerm_kusto_iothub_data_connection - update event_system_properties validation and documentation to be more flexible (#29314)azurerm_linux_web_app - correctly read backup.schedule.start_time into state (#29254)azurerm_netapp_volume - update validation for storage_quota_in_gb to allow values from 50 to 102400 (#29341)azurerm_postgresql_flexible_server - downgrading version forces a new resource to be created (#28559)azurerm_postgresql_flexible_server - downgrading storage_mb forces a new resource to be created (#29309)azurerm_private_endpoint - private_dns_zone_group.private_dns_zone_ids can now be updated correctly (#29329)azurerm_search_shared_private_link_service - add locks to prevent conflicts when creating multiple instances (#29294)BREAKING CHANGES:
feature configuration item virtual_machines.graceful_shutdown is now not used due to a breaking change in the compute API. This feature block setting is now deprecated and ignored if set and will be removed in v5.0 of the provider. (#29185)azurerm_linux_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#29211)azurerm_windows_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#29211)FEATURES:
azurerm_role_assignments (#29214)ENHANCEMENTS:
azurerm_sentinel_automation_rule - update to API version 2024-09-01 (#29240)devcenter - update to API version 2025-02-01 (#29240)recoveryservices - partial update to API version 2024-10-01 (#29240)azurerm_mssql_server - export the express_vulnerability_assessment_enabled property (#29168)azurerm_dashboard_grafana - grafana_major_version is no longer ForceNew (#29212)azurerm_data_factory_linked_service_sftp - add support for SSH authentication and Key Vault secret references (#28690)azurerm_databricks_workspace - resources using managed resource groups that contain UC can now be deleted with the force_delete Provider Feature flag (#29095)azurerm_mssql_server - add support for the express_vulnerability_assessment_enabled property (#29168)azurerm_mysql_flexible_server - deprecate public_network_access_enabled in favor of public_network_access (#28890)azurerm_netapp_volume - service_level can now be updated (#29209)azurerm_nginx_deployment - frontend_public, frontend_private, and network_interface are no longer ForceNew (#28577)azurerm_orchestrated_virtual_machine_scale_set - add support for the upgrade_mode and rolling_upgrade_policy properties (#28354)azurerm_static_webapp - mark app_settings sensitive in schema (#28689)BUG FIXES:
azurerm_linux_virtual_machine - license_type can now be updated to None (#28786)azurerm_mysql_flexible_server - prevent a panic when customer_managed_key is nil (#29225)azurerm_traffic_manager_nested_endpoint - remove Computed from priority property as these are assigned dynamically by the API (#29217)ENHANCEMENTS:
go-azure-helpers - update to 0.72.0 (#29206)redisenterprise - update to API version 2024-10-01 (#29073)servicefabricmanaged - update to API version 2024-04-01 (#29199)azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#28560)azurerm_cosmosdb_account - add support for the DeleteAllItemsByPartitionKey value in the capabilities property (#29126)azurerm_hdinsight_spark_cluster_resource - add support for the zones property (#28149)azurerm_linux_function_app - add support for Python version 3.13 (#29131)azurerm_linux_function_app_slot - add support for Python version 3.13 (#29131)azurerm_linux_web_app - add support for Python version 3.13 (#29131)azurerm_linux_web_app_slot - add support for Python version 3.13 (#29131)azurerm_log_analytics_workspace - add support for the LACluster SKU (#29137)azurerm_managed_disk - allow disk expansion without downtime for all storage_account_type (#28730)azurerm_mssql_job_agent - add support for the identity and sku properties (#29090)azurerm_network_manager - scope_accesses is now optional (#28781)azurerm_oracle_cloud_vm_cluster - add support for the system_version property (#29093)azurerm_powerbi_embedded - add support for A7 and A8 values for sku_name (#29153)azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#28560)BUG FIXES
azurerm_container_app_environment - prevent an error when the log analytics workspace is in a different subscription (#28647)azurerm_kubernetes_cluster_node_pool - fix issue where kubelet_disk_type couldn't be updated, updating this will now rotate the node pool (#29135)azurerm_linux_virtual_machine - fix issue where a user assigned identity couldn't be removed from the resource (#29157)azurerm_linux_virtual_machine_scale_set - fix issue where a user assigned identity couldn't be removed from the resource (#29157)azurerm_log_analytics_workspace - prevent an error when the workspace is in a soft-deleted state and linked to a log analytics cluster (#29137)azurerm_postgresql_flexible_server_virtual_endpoint - add a lock on the replica server to prevent a race condition (#29071)azurerm_signalr_service - set location in payload when updating to prevent an API error (#29184)azurerm_storage_account_queue_properties - prevent a panic when the storage account is removed out of band (#28371)azurerm_storage_account_static_website - prevent a panic when the storage account is removed out of band (#28371)azurerm_stream_analytics_job - update validation to notify users if content_storage_policy hasn't been correctly set to setup job_storage_account (#29158)FEATURES:
azurerm_servicebus_namespace_customer_managed_key (#28888)azurerm_stream_analytics_job_storage_account (#29113)azurerm_web_pubsub_socketio (#28992)ENHANCEMENTS:
hashicorp/go-azure-sdk - update to v0.20250314.1213156 (#29081)loganalytics - partial update to API version 2023-03-01 (#28977)monitor - partial update to API version 2023-03-01 (#28977)postgresql - partial update to API version 2024-08-01 (#28964)azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_ai_services - add support for the network_acls.bypass property (#28569)azurerm_dashboard_grafana - add support for grafana_major_version 11 (#28884)azurerm_kubernetes_cluster_node_pool - remove call to retrieve the parent cluster in the read (#29088)azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_linux_function_app - set pre_warmed_instance_count on create (#28739)azurerm_linux_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_linux_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_redis_cache - tighten validation for sku_name, family, capacity (#29079)azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_windows_function_app - set pre_warmed_instance_count on create (#28739)azurerm_windows_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_windows_web_app - add support for node version ~22 (#29082)azurerm_windows_web_app - add support for the virtual_network_backup_restore_enabled property (#29012)azurerm_windows_web_app_slot - add support for node version ~22 (#29082)azurerm_windows_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#29012)BUG FIXES:
azurerm_app_configuration - the encryption block can now be removed (#28173)azurerm_cdn_frontdoor_origin_group - health_probe no longer resets during update unless specified (#29094)azurerm_cognitive_account - customer_managed_key can now be removed (#28368)azurerm_container_group - dns_name_label_reuse_policy is now marked as ForceNew (#29040)azurerm_disk_encryption_set - prevent crash when retrieving Key Vault details when updating (#29018)azurerm_express_route_circuit - fix issue where bandwidth_in_mbps isn't updated correctly (#28822)azurerm_key_vault_secret - revert CustomizeDiff logic to recreate the resource when expiration_date is removed (#28920)azurerm_kubernetes_cluster - fips_enabled can be updated by cycling the default node pool (#29096)azurerm_monitor_diagnostic_setting - the enabled_log block can now be removed (#28485)azurerm_mssql_database - fix validation for auto_pause_delay_in_minutes (#28670)azurerm_mssql_server - fix an issue where the provider would incorrectly error during plan operations if administrator_login or administrator_login_password were added to lifecycle.ignore_changes (#29107)NOTES:
azurerm_key_vault_secret - resource now supports the value_wowrite-only argument (#28947)FEATURES:
azurerm_network_manager_ipam_pool (#28695)ENHANCEMENTS:
Go version to 1.24.1 (#28999)hashicorp/go-azure-sdk - update to v0.20250310.1130319 (#29009)azurerm_cognitive_deployment - add support for DataZoneBatch in the sku.name property (#28973)azurerm_mongo_cluster - add support for M10, M20, and M200 compute tiers (#29026)BUG FIXES:
azurerm_linux_function_app - fix validation for site_config.application_stack.node_version to allow 22 (#28988)azurerm_postgresql_flexible_server - fix validation for customer_managed_key.key_vault_key_id and customer_managed_key.geo_backup_key_id to disallow versionless keys preventing unclear error messages (#28981)azurerm_web_pubsub_hub - validation for the auth.managed_identity_id now supports token audience as a valid input (#28495)FEATURES:
azurerm_extended_location_custom_location (#28066)azurerm_system_center_virtual_machine_manager_virtual_machine_instance (#27622)ENHANCEMENTS:
containers - update API version to 2024-09-01 (#28598)hashicorp/go-azure-sdk - update to v0.20250227.1125644 (#28902)signalr - update API version to 2024-03-01 (#28940)azurerm_container_app - add support for the template.volume.mount_options property (#28619)azurerm_storage_account_queue_properties - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_storage_account_static_website - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_storage_containers - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_api_connection - display_name and parameter_values are no longer ForceNew (#28721)azurerm_cdn_frontdoor_firewall_policy - add support for the log_scrubbing properties (#28834)azurerm_container_app - add support for the template.volume.mount_options property (#28619)azurerm_container_app_job - add support for the template.volume.mount_options property (#28619)azurerm_extended_custom_location - deprecated in favour of azurerm_extended_location_custom_location (#28066)azurerm_mongo_cluster - add support for the connection_strings attribute (#28880)azurerm_storage_account - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_storage_account_queue_properties - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_storage_account_static_website - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#28617)azurerm_workloads_sap_discovery_virtual_instance - add support for the managed_resources_network_access_type property (#28881)azurerm_workloads_sap_single_node_virtual_instance - add support for the managed_resources_network_access_type property (#28881)azurerm_workloads_sap_three_tier_virtual_instance - add support for the managed_resources_network_access_type property (#28881)BUG FIXES:
azurerm_api_management_api - split create/update methods (#28271)azurerm_express_route_circuit - allow_classic_operations is now set when resource is created (#28748)azurerm_key_vault_certificate - set partial when updating key vault certificate (#28848)azurerm_managed_disk - always set network_access_policy into state to allow Terraform to detect drift (#28934)azurerm_mssql_managed_instance - fix an issue that prevented using values only known during apply for administrator_login_password (#28843)azurerm_mssql_server - prevent panic by removing function call on a value that may be unknown (#28949)BUG FIXES:
azurerm_mssql_server - prevent panic by checking if administrator_login exists in the raw config map (#28909)SPECIAL NOTES: This 3.x.x patch release is a special, one-off, back-port of an API upgrade for the azurerm_kubernetes_cluster_trusted_access_role_binding resource to enable users still on 3.x to continue using this resource.
BUG FIXES:
azurerm_kubernetes_cluster_trusted_access_role_binding - upgrade API to 2024-05-01 (#28910)BUG FIXES:
azurerm_mssql_server - prevent panic by checking if administrator_login exists in the raw config map (#28909)NOTES:
azurerm_mssql_job_credential resource now supports the password_wo write-only argumentazurerm_mssql_server resource now supports the administrator_login_password_wo write-only argumentazurerm_mysql_flexible_server resource now supports the administrator_password_wo write-only argumentazurerm_postgresql_flexible_server resource now supports the administrator_password_wo write-only argumentazurerm_postgresql_server resource now supports the administrator_login_password_wo write-only argumentFEATURES:
azurerm_linux_function_app_flex_consumption (#28199)azurerm_network_manager_verifier_workspace (#28754)ENHANCEMENTS:
azurerm_kubernetes_cluster_trusted_access_role_binding - update API version to 2024-05-01 (#28853)desktopvirtualization - update API version to 2024-04-03 (#28771)kusto - update API version to 2024-04-13 (#28685)redis - update API version to 2024-11-01 (#28696)workloads - update API version to 2024-09-01 (#28825)azurerm_fluid_relay_server - fix versionless_id support for key_vault_key_id (#28864)azurerm_kubernetes_cluster - add support for the upgrade_override_setting property (#27962)azurerm_kusto_cluster_principal_assignment - add support for AllDatabaseMonitor role type (#28685)azurerm_linux_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)azurerm_linux_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)azurerm_linux_web_app - add support for Node Version 22 (#28840)azurerm_linux_web_app_slot - add support for Node Version 22 (#28840)azurerm_logic_app_standard - add support for the vnet_content_share_enabled property (#28879)azurerm_mssql_job_credential - add support for the password_wo and password_wo_version properties (#28808)azurerm_mssql_managed_instance - add support for the database_format and hybrid_secondary_usage properties (#28248)azurerm_mssql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#28818)azurerm_mysql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#28799)azurerm_postgresql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#28857)azurerm_postgresql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#28856)azurerm_service_plan - add support for the I1mv2, I2mv2, I3mv2, I4mv2, I5mv2 skus (#28316)azurerm_servicebus_namespace - split create/update functions (#28539)azurerm_storage_account - nested attributes in immutability_policy can now be updated (#28122)azurerm_windows_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)azurerm_windows_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)BUG FIXES:
azurerm_key_vault_secret - recreate the resource if expiration_date is removed after having been set (#28494)azurerm_log_analytics_cluster_customer_managed_key - fix error due to read-only property included in request payload during create/update/delete operations (#28862)azurerm_log_analytics_cluster_customer_managed_key - remove resource from state when deleted outside of Terraform (#28862)azurerm_log_analytics_cluster_customer_managed_key - fix resource delete function (#28862)azurerm_security_center_pricing - updating subplan now recreates the resource to work around API behaviour that enables certain settings on updated (#27805)azurerm_windows_web_app - fix change detection for tomcat_version (#28842)FEATURES:
azurerm_dynatrace_monitor (#28381)azurerm_data_protection_backup_vault_customer_managed_key (#28679)ENHANCEMENTS:
hashicorp/terraform-plugin-sdk/v2 - update to v2.36.0 (#28788)azurerm_data_factory_pipeline - update to use hashicorp/go-azure-sdk (#28768)azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)azurerm_pim_active_role_assignment - add support for Azure RBAC conditions (#27947)azurerm_storage_container - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)azurerm_storage_share - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)azurerm_storage_table - add attribute resource_manager_id (#28809)azurerm_windows_function_app - add support for node ~22 (#28815)azurerm_windows_function_app_slot - add support for node ~22 (#28815)BUG FIXES:
azurerm_container_app - add missing ingress.client_certificate_mode property that caused an error when retrieving data (#28793)azurerm_data_factory_pipeline - fix error when unmarshaling the headers for a web activity (#28768)azurerm_mssql_virtual_machine - fix an issue that prevented users from using values only known during apply as the value for auto_backup.encryption_password (#28223)FEATURES:
azurerm_stack_hci_storage_path (#28602)azurerm_ai_foundry (#27424)azurerm_ai_foundry_project (#27424)azurerm_mssql_job_step (#28691)azurerm_netapp_volume_group_oracle (#28391)azurerm_virtual_machine_scale_set_standby_pool (#28441)ENHANCEMENTS:
hashicorp/go-azure-sdk update to v0.20250213.1092825 (#28767)sentinel partial update to 2023-12-01-preview (#28195)azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)azurerm_container_app - add support for the client_certificate_mode property (#28523)azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge for custom rules (#28717)azurerm_express_route_circuit - add support for the rate_limiting_enabled property (#28659)azurerm_mssql_managed_instance_failover_group - add support for secondary_type (#28633)azurerm_sentinal_alert_rule_scheduled - increase combined limit of entity_mapping and sentinal_entity_mapping to 10 (#28195)azurerm_service_plan - support for premium_plan_auto_scale_enabled (#28524)BUG FIXES:
azurerm_cdn_frontdoor_firewall_policy - fixed issue where the js_challenge_cookie_expiration_in_minutes policies default value caused Standard_AzureFrontDoor skus to receive a BadRequest error (#28726)azurerm_servicebus_topic - prevent perma diff when provisioning a partitioned topic within a non-partitioned namespace (#26680)azurerm_linux_function_app - will no longer plan when site_config.0.cors is the default value (#28703)azurerm_linux_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)azurerm_linux_web_app - will no longer plan when site_config.0.cors is the default value (#28703)azurerm_postgresql_flexible_server_virtual_endpoint - allow source_server_id and replica_server_id to reference the same server (#28733)azurerm_windows_function_app - will no longer plan when site_config.0.cors is the default value (#28703)azurerm_windows_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)azurerm_windows_web_app - will no longer plan when site_config.0.cors is the default value (#28703)ENHANCEMENTS:
appconfiguration - update to API version 2024-05-01 (#28700)azurerm_cdn_frontdoor_rule to API version 2024-02-01 (#28308)azurerm_cdn_frontdoor_ruleset to API version 2024-02-01 (#28308)go-azure-sdk to v0.20250131.1134653 (#28674)azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge action type in the managed_rule override block (#28308)azurerm_container_app - add support for the volume_mounts.sub_path property (#27533)azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)azurerm_palo_alto_next_generation_firewall_virtual_hub_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)azurerm_palo_alto_next_generation_firewall_virtual_hub_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)azurerm_palo_alto_next_generation_firewall_virtual_network_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)azurerm_route_server - add support for the hub_routing_preference property (#28363)BUG FIXES:
azurerm_logic_app_action_http - fix issue where queries would be set to an empty map instead of null when omitted from the configuration (#28447)azurerm_machine_learning_compute_cluster - allow resource creation when node_public_ip_enabled is false and subnet_resource_id has not been specified (#28673)azurerm_network_watcher_flow_log - prevent panic when removing the traffic_analytics block (#28416)azurerm_oracle_autonomous_database - fix incorrect type for the supported_regions_to_clone_to property (#28536)FEATURES:
azurerm_api_management_subscription (#27824)azurerm_cognitive_account_rai_policy (#28013)azurerm_mssql_job_target_group (#28492)ENHANCEMENTS:
network - update to use 2024-05-01 (#28146)privatedns - update to use 2024-06-01 (#28599)storage - update to use 2023-05-01 (#27760)azure_communication_service - add support for the hostname property (#28620)azurerm_api_management - capacity now has a max limit of 50 (#28648)azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#27950)azurerm_cognitive_account - support for the bypass property (#28221)azure_communication_service - add support for the hostname property (#28620)azurerm_container_app_environment - add support for Azure Monitor as a log destination (#26047)azurerm_mssql_elasticpool- add support for MOPRMS pool type and update validation for PRMS and Gen5 pool types (#28453)azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#28480)azurerm_stream_analytics_output_cosmosdb - support for the authentication_mode property (#28372)azurerm_stream_analytics_stream_input_blob - add support for authentication_mode (#27853)BUG FIXES:
azurerm_container_app - update the validation regex for the resource's name (#28528)azurerm_kubernetes_cluster - parse oms_agent.log_analytics_workspace_id insensitively to handle inconsistent casing (#28575)azurerm_kubernetes_flux_configuration - fix issue where removing post_build from a kustomization resulted in an error from the API (#28590)azurerm_linux_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)azurerm_log_analytics_storage_insights - use subscription from workspace ID when building the resource ID (#28469)azurerm_orchestrated_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)azurerm_virtual_machine - parse os_disk insensitively to handle inconsistent casing (#28592)azurerm_windows_virtual_machine_scale_set - Prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)NOTE: This release contains a breaking change reverting redisenterprise API version from 2024-10-01 to 2024-06-01-preview as not all regions are currently supported in the 2024-10-01 version
BREAKING CHANGES:
redisenterprise API version reverted from 2024-10-01 to 2024-06-01-preview (#28516)FEATURES:
azurerm_container_registry_credential_set (#27528)azurerm_mssql_job (#28456)azurerm_mssql_job_schedule (#28456)ENHANCEMENTS:
hashicorp/go-azure-sdk to v0.20250115.1141151 (#28519)costmanagement update to use 2023-08-01 (#27680)postgresql update API version to 2024-08-01 (#28474)azurerm_container_app – support for the termination_grace_period_seconds property (#28307)azurerm_cost_anomaly_alert - add support for the notification_email property (#27680)azurerm_data_protection_backup_vault - support for immutability property (#27859)azurerm_databricks_workspace - fix ignore_changes support (#28527)azurerm_kubernetes_cluster_node_pool - add support for the temporary_name_for_rotation property to allow node pool rotation (#27791)azurerm_linux_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)azurerm_linux_web_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)azurerm_windows_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)BUG FIXES:
azurerm_logic_app_standard - fix setting public_network_access for conflicting API properties (#28465)azurerm_redis_cache - data_persistence_authentication_method can now be unset (#27932)azurerm_mssql_database - fix bug where verifying TDE might fail to return an error on failure (#28505)azurerm_mssql_database - fix several potential bugs where retry functions could return false negatives for actual errors (#28505)azurerm_private_endpoint - fix a bug where reading Private DNS could error and exit the Read of the resource early without raising an error (#28505)FEATURES:
azurerm_kubernetes_fleet_manager (#28278)azurerm_arc_kubernetes_provisioned_cluster (#28216)azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#27874)azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#27931)azurerm_dynatrace_tag_rules (#27985)ENHANCEMENTS:
go-git version to 5.13.0 (#28425)hashicorp/go-azure-sdk to v0.20241212.1154051 (#28360)frontdoor - partial update to use 2024-02-01 API (#28233)postgresql - update to 2024-08-01 (#28380)redisenterprise - update to 2024-10-01 and support for new skus (#28280)azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)azurerm_static_web_app - add support for the repository_url and repository_branch properties (#27401)azurerm_billing_account_cost_management_export - add support for the file_format property (#27122)azurerm_cdn_frontdoor_profile - add support for the identity property (#28281)azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#28404)azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#28442)azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#25695)azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#28352)azurerm_netapp_volume - make the network_features property Optional/Computed (#28390)azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)azurerm_resource_group_cost_management_export - add support for the file_format property (#27122)azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#28398)azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#27401)azurerm_subscription_cost_management_export - add support for the file_format property (#27122)azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#27830)azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#28352)azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#24801)BUG FIXES:
azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#28427)azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#28312)azurerm_batch_pool - support for new block security_profile (#28069)azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#27876)azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#28215)azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#28269)azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#28319)azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#28279)BREAKING CHANGES:
nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#27776)azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#27776)azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#27776)azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#27915)azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#27776)FEATURES:
azurerm_cognitive_account_rai_blocklist (#28043)azurerm_fabric_capacity (#28080)ENHANCEMENTS:
go-azure-sdk to v0.20241206.1180327 (#28211)nginx - update api version to 2024-11-01-preview (#28227)azurerm_linux_function_app - add support for preview value 21 for java_version (#26304)azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)azurerm_linux_web_app - add support for preview value 21 for java_version (#26304)azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)azurerm_search_service - add support for the network_rule_bypass_option property (#28139)azurerm_windows_function_app - add support for preview value 21 for java_version (#26304)azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)azurerm_windows_web_app - add support for preview value 21 for java_version (#26304)BUG FIXES:
azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#28228)ENHANCEMENTS:
azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#28100)azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#28171)azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#28123)azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#28177)BUG:
azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#28158)azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#28143)azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#28025)azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#28178)azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#28105)