v4.11.0

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#28083)
• New Resource: azurerm_eventgrid_namespace (#27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#28075)
• batch - upgrade api version to 2024-07-01 (#27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#28039)
• azurerm_arc_machine - add support for the identity and tags properties (#27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#28039)

BUG:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#27828)

v4.10.0

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#27827)
• New Resource: azurerm_netapp_backup_vault (#27188)
• New Resource: azurerm_netapp_backup_policy (#27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#27909)
• azurerm_application_gateway - support more values for the status_code property (#27535)
• azurerm_bastion_host - support for the zones property (#27909)
• azurerm_communication_service - support for usgov region (#27919)
• azurerm_email_communication_service - support for usgov region added (#27919)
• azurerm_linux_function_app - support for .NET 9 (#27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#27879)
• azurerm_linux_web_app - support for .NET 9 (#27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_web_app - support for .NET 9 (#27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_function_app - support for .NET 9 (#27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#27966)

v4.9.0

FEATURES:

• New Resource: azurerm_dynatrace_monitor (#27432)
• New Resource: azurerm_dashboard_grafana_managed_private_endpoint (#27781)
• New Resource: azurerm_data_protection_backup_instance_mysql_flexible_server (#27464)
• New Resource: azurerm_mongo_cluster (#27636)
• New Resource: azurerm_stack_hci_network_interface (#26888)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241104.1140654 (#27896)
• dependencies - update go-azure-helpers to v0.71.0 (#27897)
• dependencies - update golang-jwt to v4.5.1 (#27938)
• storage - allow azurerm_storage_account to be used in Data Plane restrictive environments (#27818)
• azurerm_cognitive_deployment - sku.0.name now supports DataZoneStandard (#27926)
• azurerm_mssql_managed_database - support for the tags property (#27857)
• azurerm_oracle_cloud_vm_cluster - support for the domain, scan_listener_port_tcp, scan_listener_port_tcp_ssl and zone_id properties (#27808)
• azurerm_public_ip_prefix - support for the sku_tier property (#27882)
• azurerm_public_ip - support for the domain_name_label_scope property (#27748)
• azurerm_subnet - default_outbound_access_enabled can now be updated (#27858)
• azurerm_storage_container - support for the storage_account_id property (#27733)
• azurerm_storage_share - support for the storage_account_id property (#27733)

v3.117.0

SPECIAL NOTES: This 3.x release is a special, one-off, back-port of functionality for azurerm_storage_account to enable users to deploy this resource in environments which block / are restrictive of Data Plane access, thus preventing the resource being created and/or managed. This functionality is back-ported from the v4.9.0 release. Users migrating from this release to the 4.x line, should upgrade directly to v4.9.0 or later, as these features are not compatible with earlier releases of 4.x.

FEATURES:

• New Resource: azurerm_storage_account_queue_properties (#27819)
• New Resource: azurerm_storage_account_static_website (#27819)
• New Provider Feature - storage data_plane_available feature flag (#27819)

ENHANCEMENTS:

• azurerm_storage_account - can now be created and managed if Data Plane endpoints are blocked by a firewall (#27819)

v4.8.0

FEATURES:

• New Data Source: azurerm_virtual_network_peering (#27530)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_fqdn (#27384)
• New Resource: azurerm_stack_hci_extension (#26929)
• New Resource: azurerm_stack_hci_marketplace_gallery_image (#27532)
• New Resource: azurerm_trusted_signing_account (#27720)

ENHANCEMENTS:

• mysql - upgrade api version to 2023-12-30 (#27767)
• network - upgrade api version to 2024-03-01 (#27746)
• azurerm_cosmosdb_account: support for CMK through managed_hsm_key_id property (#26521)
• azurerm_cosmosdb_account - support further versions for mongo_server_version (#27763)
• azurerm_container_app_environment - changing the log_analytics_workspace_id property no longer creates a new resource (#27794)
• azurerm_data_factory_linked_service_azure_sql_database - add support for the credential_name property (#27629)
• azurerm_key_vault_key - expiration_date only recreates the resource when it is removed from the config file (#27813)
• azurerm_kubernetes_cluster - fix issue wheremaintenance_window_auto_upgrade/maintenance_window_auto_upgrade/maintenance_window_node_os might not be read into state (#26915)
• azurerm_kubernetes_cluster - support for the backend_pool_type property (#27596)
• azurerm_kubernetes_cluster - support for the daemonset_eviction_for_empty_nodes_enabled, daemonset_eviction_for_occupied_nodes_enabled, and ignore_daemonsets_utilization_enabled properties (#27588)
• azurerm_load_test - description can now be updated (#27800)
• azurerm_oracle_cloud_vm_cluster - export the ocid property (#27785)
• azurerm_orchestrated_virtual_machine_scale_set - add support for sku_profile block (#27599)
• azurerm_web_application_firewall_policy - add support for policy_settings.0.file_upload_enforcement (#27774)

BUG FIXES:

• azurerm_automation_hybrid_runbook_worker_group - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_automation_hybrid_runbook_worker - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_automation_python3_package - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_data_protection_backup_vault - prevent panic when checking value of cross_region_restore_enabled (#27762)
• azurerm_role_management_policy - fix panic when unmarshalling the policy into a specific type (#27731)
• azurerm_security_center_subscription_pricing - correctly type assert the additional_extension_properties property when building the payload (#27721)
• azurerm_synapse_workspace_aad_admin - will no correctly delete when using azurerm_synapse_workspace_aad_admin with azurerm_synapse_workspace (#27606)
• azurerm_windows_function_app_slot - fixed panic in state migration (#27700)

v4.7.0

FEATURES:

• New Data Source: azurerm_oracle_adbs_character_sets (#27698)
• New Data Source: azurerm_oracle_adbs_national_character_sets (#27698)
• New Data Source: azurerm_oracle_autonomous_database (#27696)
• New Data Source: azurerm_oracle_db_nodes (#27698)
• New Data Source: azurerm_oracle_db_system_shapes (#27698)
• New Data Source: azurerm_oracle_gi_versions (#27698)
• New Resource: azurerm_dev_center_project_pool (#27706)
• New Resource: azurerm_oracle_autonomous_database (#27696)
• New Resource: azurerm_video_indexer_account (#27632)

ENHANCEMENTS:

• Dependencies - update go-azure-sdk to v0.20241021.1074254 (#27713)
• newrelic - upgrade api version to 2024-03-01 (#27135)
• cosmosdb - upgrade api version to 2024-08-15 (#27659)
• azurerm_application_gateway - support for the new Basic SKU value (#27440)
• azurerm_consumption_budget_management_group - the property notification.threshold_type can now be updated (#27511)
• azurerm_consumption_budget_resource_group - the property notification.threshold_type can now be updated (#27511)
• azurerm_container_app - add support for the template.container.readiness_probe.initial_delay and template.container.startup_probe.initial_delay properties (#27551)
• azurerm_mssql_managed_instance - the storage_account_type property can now be updated (#27737)

BUG FIXES:

• azurerm_automation_software_update_configuration - correct validation to not allow 5 and allow -1 (#25574)
• azurerm_cosmosdb_sql_container - fix recreation logic for partition_key_version (#27692)
• azurerm_mssql_database - updating short term retention policy now works as expected (#27714)
• azurerm_network_watcher_flow_log - fix issue where tags were not being updated (#27389)
• azurerm_postgresql_flexible_server_virtual_endpoint - retrieve and parse replica_server_id for cross-region scenarios as well as remove custom poller for the delete operation (#27509)

v4.6.0

FEATURES:

• New Resource: azurerm_dev_center_attached_network (#27638)
• New Resource: azurerm_oracle_cloud_vm_cluster (#27678)
• New Resource: azurerm_oracle_exadata_infrastructure (#27678)
• New Data Source: azurerm_oracle_cloud_vm_cluster (#27678)
• New Data Source: azurerm_oracle_db_servers (#27678)
• New Data Source: azurerm_oracle_exadata_infrastructure (#27678)

ENHANCEMENTS:

• redisenterprise - upgrade api version to 2024-06-01-preview (#27597)
• azurerm_app_configuration - support for premium sku (#27674)
• azurerm_container_app - support for the max_inactive_revisions property (#27598)
• azurerm_kubernetes_cluster - remove lock on subnets (#27583)
• azurerm_nginx_deployment - allow updates for sku (#27604)
• azurerm_fluid_relay_server - support for the customer_managed_key property (#27581)
• azurerm_linux_virtual_machine - support the UBUNTU_PRO value for the license_type property (#27534)

BUGS:

• azurerm_api_management_api_diagnostic - do not set OperationNameFormat when the identifier property is azuremonitor (#27456)
• azurerm_api_management - prevent a panic (#27649)
• azurerm_mssql_database - make short_term_retention_policy.backup_interval_in_hours computed (#27656)

v4.5.0

FEATURES:

• New Resource: azurerm_stack_hci_virtual_hard_disk (#27474)

ENHANCEMENTS:

• azurerm_bastion_host - support for the Premium SKU and session_recording_enabled property (#27278)
• azurerm_log_analytics_cluster - the size_gb property now supports all of 100, 200, 300, 400, 500, 1000, 2000, 5000, 10000, 25000, and 50000 (#27616)
• azurerm_mssql_elasticpool - allow PRMS for the family property (#27615)

BUG FIXES:

• azurerm_mssql_database - now creates successfully when elastic pool is hyperscale (#27505)
• azurerm_postgresql_flexible_server_configuration - now locks to prevent conflicts when deploying multiple (#27355)

v4.4.0

ENHANCEMENTS:

• dependencies - update github.com/hashicorp/go-azure-sdk to v0.20240923.1151247 (#27491)
• azurerm_site_recovery_replicated_vm - support for the target_virtual_machine_size property (#27480)

BUG FIXES:

• azurerm_app_service_certificate - key_vault_secret_id can now be versionless (#27537)
• azurerm_linux_virtual_machine_scale_set - prevent crash when auto_upgrade_minor_version_enabled is nil (#27353)
• azurerm_role_assignment - correctly parse ID when it's a root or provider scope (#27237)
• azurerm_storage_blob - source_content is now ForceNew (#27508)
• azurerm_virtual_network_gateway_connection - revert shared_key to Optional and Computed (#27560)

v4.3.0

FEATURES:

• New Resource: azurerm_advisor_suppression (#26177)
• New Resource: azurerm_data_protection_backup_policy_mysql_flexible_server (#26955)
• New Resource: azurerm_key_vault_managed_hardware_security_module_key_rotation_policy (#27306)
• New Resource: azurerm_stack_hci_deployment_setting (#25646)
• New Resource: azurerm_stack_hci_storage_path (#26509)
• New Data Source: azurerm_vpn_server_configuration (#27054)

ENHANCEMENTS:

• managementgroups - migrate to hashicorp/go-azure-sdk (#26430)
• nginx - upgrade api version to 2024-06-01-preview (#27345)
• azurerm_linux[windows]_web[function]_app[app_slot] - upgrade api version from 2023-01-01 to 2023-12-01 (#27196)
• azurerm_cosmosdb_account - support for the capability EnableNoSQLVectorSearch (#27357)azurerm_container_app_custom_domain - fix parsing the certificate ID error #25972
• azurerm_container_app_custom_domain - support other certificate types (#25972)
• azurerm_linux_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#27288)
• azurerm_orchestrated_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#27288)
• azurerm_role_management_policy - support for resource scope (#27205)
• azurerm_spring_cloud_gateway - changing the environment_variables and sensitive_environment_variables properties no longer creates a new resource (#27404)
• azurerm_static_web_app - support for the public_network_access_enabled property (#26345)
• azurerm_shared_image - support for the disk_controller_type_nvme_enabled property (#26370)
• azurerm_storage_blob - changing the source property no longer creates a new resource (#27394)
• azurerm_storage_object_replication - changing the rules.x. source_container_name and rules.x. destination_container_name properties no longer creates a new resource (#27394)
• azurerm_windows_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#27288)

BUG FIXES:

• azurerm_application_insights - fix crash when read for DataVolumeCap is nil (#27352)
• azurerm_container_app - relax validation on the ingress traffic property (#27396)
• azurerm_log_analytics_workspace_table - will now correctly set total_retention_in_days when sku is Basic (#27420)