CHANGELOG.md

3.116.0 (August 16, 2024)

DEPRECATIONS:

All Azure Kubernetes Service (AKS) properties related to preview features are deprecated since they will not be available in a stable API. Please see https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/4.0-upgrade-guide#aks-migration-to-stable-api for more details (#26863)

FEATURES:

• New Resource: azurerm_ai_services (#26008)
• New Resource: azurerm_communication_service_email_domain_association (#26432)
• New Resource: azurerm_dev_center_project_environment_type (#26941)
• New Resource: azurerm_extended_location_custom_location (#24267)
• New Resource: azurerm_postgresql_flexible_server_virtual_endpoint (#26708)

ENHANCEMENTS:

• notificationhub - updating to use version 2023-09-01 (#26528)
• azurerm_api_management_api - update validation of path to allow single character strings (#26922)
• azurerm_cosmosdb_account - add support for the property burst_capacity_enabled (#26986)
• azurerm_linux_function_app - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_linux_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_logic_app_standard - add support for v8.0 in site_config.dotnet_framework_version (#26983)
• azurerm_management_group_policy_assignment - remove length restriction on name (#27055)
• azurerm_recovery_services_vault - add support for the identity block (#26254)
• azurerm_web_application_firewall_policy - add support for the js_challenge_cookie_expiration_in_minutes property (#26878)
• azurerm_windows_function_app - add support for vnet_image_pull_enabled property in 4.0 (#27001)
• azurerm_windows_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#27001)

BUG FIXES:

• Data Source: azurerm_storage_account - add default_share_level_permission to the azure_files_authentication to prevent invalid address errors (#26996)
• Data Source: azurerm_search_service - expose the tags property (#26978)
• Data Source: azurerm_virtual_machine - populate missing power_state (#26991)
• Data Source: azurerm_virtual_machine_scale_set - populate missing power_state (#26991)
• azurerm_api_management_api_schema - correctly unmarshal definition and components (#26531)
• azurerm_cdn_frontdoor_secret - fix issue where expiration_date was being set into the parent block (#26982)
• azurerm_container_app_environment - fix diff suppress on infrastructure_resource_group_name (#27007)
• azurerm_express_route_connection - prevent sending private_link_fast_path_enabled in the payload if it hasn't been explicitly set (#26928)
• azurerm_machine_learning_workspace - serverless_compute can now be updated (#26940)
• azurerm_mssql_database - fix issue where the database cannot be upgraded to use serverless due to the behaviour of the license_type field (#26850)
• azurerm_mssql_database - prevent error when creating Free edition by setting long_term_retention_policy and short_term_retention_policy as empty (#26894)
• azurerm_nginx_deployment - omit capacity when creating deployments with a basic plan (#26223)
• azurerm_role_management_policy - prevent panic when updating activation_rules.approval_stage (#26800)
• azurerm_sentinel_threat_intelligence_indicator - prevent panic when importing this resource (#26976)
• azurerm_servicebus_namespace - fix panic reading encryption with versionless ids (#27060)
• azurerm_synapse_spark_pool - prevent plan diff due to API behaviour by setting node_count as Computed (#26953)
• azurerm_virtual_network_gateway_connection - fix issue where ingress_nat_rule_ids was updating the egress rules on updates (#27022)

3.115.0 (August 09, 2024)

ENHANCEMENTS:

• cosmosdb - updating to use version 2024-05-15 (#26758)
• healthcare - updating to use version 2024-03-31 (#26699)
• redis - updating to use version 2024-03-01 (#26932)
• azurerm_cosmosdb_account - avoid infinite diff to default_identity_type for legacy resources where an empty string is returned by the RP (#26525)
• azurerm_linux_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#26227)
• azurerm_log_analytics_saved_search - update the regex for the function_parameters property to support more paramters (#26701)
• azurerm_monitor_data_collection_rule - update performance_counter.x.sampling_frequency_in_seconds range 1 to 1800 (#26898)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#26227)
• azurerm_security_center_storage_defender - add support for the property scan_results_event_grid_topic_id (#26599)
• azurerm_storage_account - add support for the property default_share_level_permission in the azure_files_authentication block (#26924)
• azurerm_web_application_firewall_policy - excluded_rule_set.0.type supports Microsoft_BotManagerRuleSet (#26903)
• azurerm_windows_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#26227)

BUG FIXES:

• azurerm_container_group - retrieve and set storage_account_key in the payload when updating the resource (#26640)
• azurerm_key_vault_managed_hardware_security_module_role_assignment - fixed a crash in error messages (#26972)
• azurerm_kubernetes_cluster - allow an empty list for dns_zone_ids in the web_app_routing block (#26747)
• azurerm_storage_share_file - fix a bug when encoding the MD5 hash for the content_md5 property (#25715)

3.114.0 (August 01, 2024)

UPGRADE NOTES:

• 4.0 Beta: This release includes a new feature-flag to opt-into the 4.0 Beta - which (when enabled) introduces a number of behavioural changes, field renames and removes some older deprecated resources and data sources. Please read the disclaimers carefully that are outlined in our guide on how to opt-into the 4.0 Beta before enabling this, as this will cause irreversible changes to your state. The 4.0 Beta is still a work-in-progress at this time and the changes listed in the 4.0 Upgrade Guide may change. We're interested to hear your feedback which can be provided by following this link.

FEATURES:

• New Resource: azurerm_dev_center_network_connection (#26718)
• New Resource: azurerm_stack_hci_logical_network (#26473)

ENHANCEMENTS:

• dependencies: updating go-azure-helpers to v0.70.1 (#26757)
• arckubernetes - updating to use version 2024-01-01 (#26761)
• data.azurerm_storage_account - the enable_https_traffic_only property has been superseded by https_traffic_only_enabled (#26740)
• azurerm_log_analytics_cluster - add support for setting size_gb to 100 [GH-#26865]
• azurerm_storage_account - the enable_https_traffic_only property has been superseded by https_traffic_only_enabled (#26740)

BUG FIXES:

• azurerm_dns_cname_record - split create and update function to fix lifecycle - ignore (#26610)
• azurerm_dns_srv_record - split create and update function to fix lifecycle - ignore (#26627)
• azurerm_kubernetes_cluster - fix issue that prevented max_count from being updated (#26417)
• azurerm_linux_web_app - correctly set site_config.always_on as configured during Update (#25753)
• azurerm_linux_web_app_slot - correctly set site_config.always_on as configured during Update (#25753)
• azurerm_management_group_policy_remediation - fix panic in deprecated schema change for 4.0 (#26767)
• azurerm_network_security_rule - fix panic when updating source_port_ranges (#26883)
• azurerm_public_ip - fix panix when updating idle_timeout_in_minutes

DEPRECATIONS:

• azurerm_redis_cache - enable_non_ssl_port has been superseded by non_ssl_port_enabled and redis_configuration. enable_authentication has been superseded by redis_configuration.authentication_enabled (#26608)

3.113.0 (July 18, 2024)

ENHANCEMENTS:

• dependencies: updating to v0.20240715.1100358 of hashicorp/go-azure-sdk (#26638)
• storage - updating to use hashicorp/go-azure-sdk (#26218)

BUG FIXES:

• azurerm_storage_account - fix a validation bug when replacing a StorageV2 account with a StorageV1 account (#26639)
• azurerm_storage_account - resolve an issue refreshing blob or queue properties after recreation (#26218)
• azurerm_storage_account - resolve an issue setting tags for an existing storage account where a policy mandates them (#26218)
• azurerm_storage_account - fix a persistent diff with the customer_managed_key block (#26218)
• azurerm_storage_account - resolve several consistency related issues when crreating a new storage account (#26218)

DEPRECATIONS:

• azurerm_eventhub_namespace - deprecate the zone_redundant field in v4.0 (#26611)
• azurerm_servicebus_namespace - deprecate the zone_redundant field in v4.0 (#26611)

3.112.0 (July 12, 2024)

FEATURES:

• New Data Source: azurerm_elastic_san_volume_snapshot (#26439)
• New Resource: azurerm_dev_center_dev_box_definition (#26307)
• New Resource: azurerm_dev_center_environment_type (#26291)
• New Resource: azurerm_virtual_machine_restore_point (#26526)
• New Resource: azurerm_virtual_machine_restore_point_collection (#26526)

ENHANCEMENTS:

• dependencies: updating to v0.20240710.1114656 of github.com/hashicorp/go-azure-sdk (#26588)
• dependencies: updating to v0.70.0 of go-azure-helpers (#26601)
• containerservice: updating the Fleet resources to use API Version 2024-04-01 (#26588)
• Data Source: azurerm_network_service_tags - extend validation for service to allow AzureFrontDoor.Backend, AzureFrontDoor.Frontend, and AzureFrontDoor.FirstParty (#26429)
• azurerm_api_management_identity_provider_aad - support for the client_library property (#26093)
• azurerm_api_management_identity_provider_aadb2c - support for the client_library property (#26093)
• azurerm_dev_test_virtual_network - support for the shared_public_ip_address property (#26299)
• azurerm_kubernetes_cluster - support for the certificate_authority block under the service_mesh_profile block (#26543)
• azurerm_linux_web_app - support the value 8.3 for the php_version property (#26194)
• azurerm_machine_learning_compute_cluster - the identity property can now be updated (#26404)
• azurerm_web_application_firewall_policy - support for the JSChallenge value for managed_rules.managed_rule_set.rule_group_override.rule_action (#26561)

BUG FIXES:

• Data Source: azurerm_communication_service - primary_connection_string, primary_key, secondary_connection_string and secondary_key are marked as Sensitive (#26560)
• azurerm_app_configuration_feature - fix issue when updating the resource without an existing targeting_filter (#26506)
• azurerm_backup_policy_vm - split create and update function to fix lifecycle - ignore (#26591)
• azurerm_backup_protected_vm - split create and update function to fix lifecycle - ignore (#26583)
• azurerm_communication_service - the primary_connection_string, primary_key, secondary_connection_string, and secondary_key properties are now sensitive (#26560)
• azurerm_mysql_flexible_server_configuration - add locks to prevent conflicts when deleting the resource (#26289)
• azurerm_nginx_deployment - changing the frontend_public.ip_address, frontend_private.ip_address, frontend_private.allocation_method, and frontend_private.subnet_id now creates a new resource (#26298)
• azurerm_palo_alto_local_rulestack_rule - correctl read the protocol property on read when the protocol_ports property is configured (#26510)
• azurerm_servicebus_namespace - parse the identity returned by the API insensitively before setting into state (#26540)

DEPRECATIONS:

• azurerm_servicebus_queue - enable_batched_operations, enable_express and enable_partitioning are superseded by batched_operations_enabled, express_enabled and partitioning_enabled (#26479)
• azurerm_servicebus_subscription - enable_batched_operations has been superseded by batched_operations_enabled (#26479)
• azurerm_servicebus_topic - enable_batched_operations, enable_express and enable_partitioning are superseded by batched_operations_enabled, express_enabled and partitioning_enabled (#26479)

3.111.0 (July 04, 2024)

FEATURES:

• New Resource: azurerm_restore_point_collection (#26518)

ENHANCEMENTS:

• dependencies: updating to v0.20240701.1082110 of github.com/hashicorp/go-azure-sdk (#26502)
• azurerm_disk_encryption_set - support for the managed_hsm_key_id property (#26201)
• azurerm_firewall_policy - remove Computed from the sku property and add a default of Standard in 4.0 (#26499)
• azurerm_kubernetes_cluster - support updating default_node_pool.os_sku between Ubuntu and AzureLinux (#26262)
• azurerm_kubernetes_cluster_node_pool - support updating os_sku between Ubuntu and AzureLinux (#26139)
• azurerm_service_plan - support for new the Flex Consumption plan (#26351)

BUG FIXES:

• azurerm_kubernetes_cluster - prevent a panic (#26478)
• azurerm_kubernetes_cluster - prevent a diff in upgrade_settings when the API returns an empty object (#26541)
• azurerm_kubernetes_cluster_node_pool - prevent a diff in upgrade_settings when the API returns an empty object (#26541)
• azurerm_virtual_network_gateway - split create and update function to fix lifecycle - ignore (#26451)
• azurerm_virtual_network_gateway_connection - split create and update function to fix lifecycle - ignore (#26431)

3.110.0 (June 27, 2024)

FEATURES:

• New Data Source: azurerm_load_test (#26376)
• New Resource: azurerm_virtual_desktop_scaling_plan_host_pool_association (#24670)

ENHANCEMENTS:

• Data Source: azurerm_monitor_data_collection_endpoint - support for the immutable_id property (#26380)
• Data Source: azurerm_nginx_certificate - export the properties sha1_thumbprint, key_vault_secret_version, key_vault_secret_creation_date, error_code and error_message (#26160)
• azurerm_backup_policy_vm - support for the tiering_policy property (#26263)
• azurerm_kubernetes_cluster_node_pool - Pod Disruption Budgets are now respected when deleting a node pool (#26471)
• azurerm_monitor_data_collection_endpoint - support for the immutable_id property (#26380)
• azurerm_mssql_managed_instance - support the value GZRS for the storage_account_type property (#26448)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#26496)
• azurerm_redis_cache_access_policy - allow updates to permissions (#26440)
• azurerm_redhat_openshift_cluster - support for the managed_resource_group_name property (#25529)
• azurerm_redhat_openshift_cluster - support for the preconfigured_network_security_group_enabled property (#26082)
• azurerm_iotcentral_application - remove Computed from template and set default of [email protected] in 4.0 (#26485)
• azurerm_digital_twins_time_series_database_connection - remove Computed from kusto_table_name and set a default of AdtPropertyEvents in 4.0 (#26484)

BUG FIXES:

• Data Source: azurerm_express_route_circuit_peering - fix issue where data source attempts to parse an empty string instead of generating the resource ID (#26441)
• azurerm_express_route_gateway - prevent a panic (#26467)
• azurerm_monitor_scheduled_query_rules_alert_v2 - correctly handle the identity block if not specified (#26364)
• azurerm_security_center_automation - prevent resource recreation when tags are updated (#26292)
• azurerm_synapse_workspace - fix issue where azure_devops_repo or github_repo configuration could not be removed (#26421)
• azurerm_virtual_network_dns_servers - split create and update function to fix lifecycle - ignore (#26427)
• azurerm_linux_function_app - set allowed_applications in the request payload (#26462)
• azurerm_linux_function_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_windows_function_app - set allowed_applications in the request payload (#26462)
• azurerm_windows_function_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_linux_web_app - set allowed_applications in the request payload (#26462)
• azurerm_linux_web_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_windows_web_app - set allowed_applications in the request payload (#26462)
• azurerm_windows_web_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_api_management - remove ForceNew from additional_location.zones (#26384)
• azurerm_logic_app_integration_account_schema - the name property now allows underscores (#26475)
• azurerm_palo_alto_local_rulestack_rule - prevent error when switching between protocol and protocol_ports (#26490)

DEPRECATIONS:

• azurerm_analysis_service_server - the property enable_power_bi_service has been superseded by power_bi_service_enabled (#26456)

3.109.0 (June 20, 2024)

FEATURES:

• New Data Source: azurerm_automation_runbook (#26359)
• New Resource: azurerm_data_protection_backup_instance_postgresql_flexible_server (#26249)
• New Resource: azurerm_email_communication_service_domain (#26179)
• New Resource: azurerm_system_center_virtual_machine_manager_cloud (#25429)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_machine_template (#25449)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_network (#25451)

ENHANCEMENTS:

• Data Source: azurerm_hdinsight_cluster - export the cluster_id attribute (#26228)
• azurerm_cosmosdb_sql_container - support for the partition_key_kind and partition_key_paths properties (#26372)
• azurerm_data_protection_backup_instance_blob_storage - support for the storage_account_container_names property (#26232)
• azurerm_virtual_network_peering - support for the peer_complete_virtual_networks_enabled, only_ipv6_peering_enabled, local_subnet_names, and remote_subnet_names properties (#26229)
• azurerm_virtual_desktop_host_pool - changing the preferred_app_group_type property no longer creates a new resource (#26333)
• azurerm_maps_account - support for the location, identity, cors and data_store properties (#26397)

BUG FIXES:

• azurerm_automation_job_schedule - updates azurerm_automation_job_schedule to use a composite resource id and allows azurerm_automation_runbook to be updated without causing azurerm_automation_job_schedule to recreate (#22164)
• azurerm_databricks_workspace- correctly allow disabling the default firewall (#26339)
• azurerm_virtual_hub_* - spliting create and update so lifecycle ignore changes works correctly (#26310)

DEPRECATIONS:

• Data Source: azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#26354)
• azurerm_mariadb_configuration - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_configuration instead (#26354)
• azurerm_mariadb_database - deprecated since the service is retiring. Please use azurerm_mysql_flexible_database instead (#26354)
• azurerm_mariadb_firewall_rule - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_firewall_rule instead (#26354)
• azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#26354)
• azurerm_mariadb_virtual_network_rule - deprecated since the service is retiring (#26354)

3.108.0 (June 13, 2024)

FEATURES:

• New Data Source: azurerm_role_management_policy (#25900)
• New Resource: azurerm_role_management_policy (#25900)

ENHANCEMENTS:

• provider: support subscription ID hinting when using Azure CLI authentication (#26282)
• serviceconnector: updating to use API Version 2024-04-01 (#26248)
• azurerm_container_groups - can now be created with a User Assigned Identity when running Windows (#26308)
• azurerm_kubernetes_cluster - updating the network_profile.network_policy property to azure and calico when it hasn't been previously set is supported (#26176)
• azurerm_kubernetes_cluster - respect Pod Distruption Budgets when rotating the default_node_pool (#26274)
• azurerm_lb_backend_address_pool - support for the synchronous_mode property (#26309)
• azurerm_private_endpoint - support symultaneous creation of multiple resources of this type per subnet (#26006)

BUG FIXES:

• azurerm_express_route_circuit_peering, azurerm_express_route_circuit, azurerm_express_route_gateway, azurerm_express_route_port - split create and update (#26237)
• azurerm_lb_backend_address_pool_address - when using this resource, values are no longer reset on azurerm_lb_backend_address_pool (#26264)
• azurerm_route_filter - spliting create and update so lifecycle ignore changes works correctly (#26266)
• azurerm_route_server - spliting create and update so lifecycle ignore changes works correctly (#26266)
• azurerm_synapse_workspace - updates the client used in all operations of azurerm_synapse_workspace_sql_aad_admin to prevent this resource from modifying the same resource as azurerm_synapse_workspace_aad_admin (#26317)
• azurerm_virtual_network - correctly parse network securty group IDs (#26283)

DEPRECATIONS:

• Data Source: azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#26293)
• azurerm_api_management - the policy block has been deprecated is superseded by the azurerm_api_management_policy resource (#26305)
• azurerm_kubernetes_cluster - the ebpf_data_plane property has been deprecated and superseded by the network_data_plane property (#26251)
• azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#26293)
• azurerm_synapse_workspace - the aad_admin and sql_aad_admin blocks have been deprecated and superseded by the azurerm_synapse_workspace_aad_admin and azurerm_synapse_workspace_sql_aad_admin resources (#26317)

3.107.0 (June 06, 2024)

FEATURES:

• New Resource: azurerm_data_protection_backup_policy_postgresql_flexible_server (#26024)

ENHANCEMENTS:

• dependencies: updating to v0.20240604.1114748 of github.com/hashicorp/go-azure-sdk (#26216)
• advisor: update API version to 2023-01-01 (#26205)
• keyvault: handling the Resources API returning Key Vaults that have been deleted when populating the cache (#26199)
• machinelearning: update API version to 2024-04-01 (#26168)
• network/privatelinkservices - update to use hashicorp/go-azure-sdk (#26212)
• network/serviceendpointpolicies - update to use hashicorp/go-azure-sdk (#26196)
• network/virtualnetworks - update to use hashicorp/go-azure-sdk (#26217)
• network/virtualwans: update route resources to use hashicorp/go-azure-sdk (#26189)
• azurerm_container_app_job - support for the key_vault_secret_id and identity properties in the secret block (#25969)
• azurerm_kubernetes_cluster - support forthe dns_zone_ids popperty in the web_app_routing block (#26117)
• azurerm_notification_hub_authorization_rule - support for the primary_connection_string and secondary_connection_string properties (#26188)
• azurerm_subnet - support for the default_outbound_access_enabled property (#25259)

BUG FIXES:

• azurerm_api_management_named_value - will now enforce setting the secret property when setting the value_from_key_vault property (#26150)
• azurerm_storage_sync_server_endpoint - improve pooling to work around api inconsistencies (#26204)
• azurerm_virtual_network - split create and update function to fix lifecycle - ignore (#26246)
• azurerm_vpn_server_configuration - split create and update function to fix lifecycle - ignore (#26175)
• azurerm_vpn_server_configuration_policy_group - split create and update function to fix lifecycle - ignore (#26207)
• azurerm_vpn_site - split create and update function to fix lifecycle - ignore changes (#26163)

DEPRECATIONS:

• azurerm_kubernetes_cluster - the property dns_zone_id has been superseded by the property dns_zone_ids in the web_app_routing block (#26117)
• azurerm_nginx_deployment - the block configuration has been deprecated and superseded by the resource azurerm_nginx_configuration (#25773)

3.106.1 (May 31, 2024)

BUG FIXES:

• Data Source: azurerm_kubernetes_cluster - fix a crash when reading/setting upgrade_settings (#26173)

3.106.0 (May 31, 2024)

UPGRADE NOTES:

• This release updates the Key Vault cache to load Key Vaults using both the Key Vaults List API and the Resources API to workaround the API returning incomplete/stale data. To achieve this, and provide consistency between tooling, we are intentionally using the same older version of the Resources API as the current version of Azure CLI. (#26070)

FEATURES:

• New Data Source: azurerm_arc_resource_bridge_appliance (#25731)
• New Data Source: azurerm_elastic_san_volume_group (#26111)
• New Data Source: azurerm_storage_queue (#26087)
• New Data Source: azurerm_storage_table (#26126)
• New Resource: azurerm_container_registry_cache_rule (#26034)
• New Resource: azurerm_virtual_machine_implicit_data_disk_from_source (#25537)

ENHANCEMENTS:

• Data Source: azurerm_kubernetes_cluster - add support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• dependencies: updating to v0.20240529.1155048 of github.com/hashicorp/go-azure-sdk (#26148)
• containerapps: update API version to 2024-03-01 (#25993)
• expressroute: update to use hashicorp/go-azure-sdk (#26066)
• keyvault: populating the cache using both the Key Vault List and Resources API to workaround incomplete/stale data being returned (#26070)
• servicenetworking: updating to API Version 2023-11-01 (#26148)
• virtualnetworkpeerings: update to use hashicorp/go-azure-sdk (#26065)
• azurerm_automation_powershell72_module - support for the tags property (#26106)
• azurerm_bastion_host - support for Developer SKU (#26068)
• azurerm_container_app_environment - support for the mutual_tls_enabled property (#25993)
• azurerm_container_registry - validation to fail fast when setting public_network_access_enabled with an invalid SKU (#26054)
• azurerm_key_vault_managed_hardware_security_module - the public_network_access_enabled property can now be updated (#26075)
• azurerm_kubernetes_cluster - support for the cost_analysis_enabled property (#26052)
• azurerm_kubernetes_cluster - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• azurerm_kubernetes_cluster_node_pool - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• azurerm_linux_virtual_machine - the hibernation_enabled property can now be updated (#26112)
• azurerm_logic_app_trigger_custom - support for the property callback_url (#25979)
• azurerm_machine_learning_workspace - support for the serverless_compute block (#25660)
• azurerm_mssql_elasticpool - support the sku HS_PRMS (#26161)
• azurerm_new_relic_monitor - support for the identity block (#26115)
• azurerm_route_map - the parameter property is now Optional when the action type is Drop (#26003)
• azurerm_windows_virtual_machine - the hibernation_enabled property can now be updated (#26112)

BUG FIXES:

• Data Source: azurerm_system_center_virtual_machine_manager_inventory_items - normalise the resource ID for Intentory Items (#25955)
• azurerm_app_configuration_feature - update polling interval to tolerate eventual consistency of the API (#26025)
• azurerm_app_configuration_key - update polling interval to tolerate eventual consistency of the API (#26025)
• azurerm_eventhub_namespace_customer_managed_key - validating that the User Assigned Identity used for accessing the Key Vault is assigned to the EventHub Namespace (#28509)
• azurerm_linux_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_postgresql_flexible_server - prevent premature check on updated storage_mb value that prevents the resource from being re-created (#25986)
• azurerm_redis_access_cache_policy_assignment - add locks to stabilize creation of multiple policy assignments (#26085)
• azurerm_redis_access_cache_policy - add locks to stabilize creation of multiple policy assignments (#26085)
• azurerm_windows_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)

3.105.0 (May 24, 2024)

BREAKING CHANGE:

• azurerm_kubernetes_cluster - the properties workload_autoscaler_profile.vertical_pod_autoscaler_update_mode and workload_autoscaler_profile.vertical_pod_autoscaler_controlled_values are no longer populated since they're not exported in API version 2023-09-02-preview (#25663)

FEATURES:

• New Resource: azurerm_api_management_policy_fragment (#24968)

ENHANCEMENTS:

• dependencies: updating to v0.20240522.1080424 of github.com/hashicorp/go-azure-sdk (#26069)
• containerservice: updating to use API Version 2023-09-02-preview (#25663)
• azurerm_application_insights_standard_web_test - http_verb can now be set to HEAD and OPTIONS (#26077)
• azurerm_cdn_frontdoor_rule - updating the validation for match_values within the uri_path_condition block to support a forward-slash (#26017)
• azurerm_linux_web_app - normalising the value for virtual_network_subnet_id (#25885)
• azurerm_machine_learning_compute_cluster - add validation for name (#26060)
• azurerm_machine_learning_compute_cluster - improve validation to allow an empty subnet_resource_id when the Workspace is using a managed Virtual Network (#26073)
• azurerm_postgresql_flexible_server - the field public_network_access_enabled is now configurable (previously this was computed-only/not settable via the API) (#25812)
• azurerm_snapshot - support for disk_access_id (#25996)
• azurerm_windows_web_app - normalising the value for virtual_network_subnet_id (#25885)

BUG FIXES:

• azurerm_container_app_environment_custom_domain: parsing the Log Analytics Workspace ID insensitively to workaround the API returning this inconsistently (#26074)
• azurerm_container_app_job - updating the validation for the name field (#26049)
• azurerm_container_app_job - updating the validation for the name field within the custom_scale_rule block (#26049)
• azurerm_container_app_job - updating the validation for the name field within the rules block (#26049)
• azurerm_linux_function_app_slot - fixed panic when planning from a version older than 3.88.0 (#25838)
• azurerm_pim_active_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_pim_eligible_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_policy_definition - recreate the resource if the parameters property is updated to include fewer items (#26083)
• azurerm_windows_function_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)
• azurerm_windows_web_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)

3.104.2 (May 20, 2024)

NOTE: This is a re-release of v3.104.1 to include missing changes, please refer to the changelog entries for v3.104.1.

3.104.1 (May 20, 2024)

BUG FIXES:

• azurerm_pim_active_role_assignment - fix a regression where roles assignments could not be created with no expiration (#26029)
• azurerm_pim_eligible_role_assignment - fix a regression where roles assignments could not be created with no expiration (#26029)

3.104.0 (May 16, 2024)

FEATURES:

• New Data Source: azurerm_elastic_san (#25719)

ENHANCEMENTS:

• New Resource - azurerm_key_vault_managed_hardware_security_module_key (#25935)
• Data Source - azurerm_kubernetes_service_version - support for the default_version property (#25953)
• network/applicationgateways - update to use hashicorp/go-azure-sdk (#25844)
• dataprotection - update API version to 2024-04-01 (#25882)
• databasemigration - update API version to 2021-06-30 (#25997)
• network/ips - update to use hashicorp/go-azure-sdk (#25905)
• network/localnetworkgateway - update to use hashicorp/go-azure-sdk (#25905)
• network/natgateway - update to use hashicorp/go-azure-sdk (#25905)
• network/networksecuritygroup - update to use hashicorp/go-azure-sdk (#25971)
• network/publicips - update to use hashicorp/go-azure-sdk (#25971)
• network/virtualwan - update to use hashicorp/go-azure-sdk (#25971)
• network/vpn - update to use hashicorp/go-azure-sdk (#25971)
• azurerm_databricks_workspace - support for the default_storage_firewall_enabled property (#25919)
• azurerm_key_vault - allow previously existing key vaults to continue to manage the contact field prior to the v3.93.0 conditional polling change (#25777)
• azurerm_linux_function_app - support for the PowerShell 7.4 (#25980)
• azurerm_log_analytics_cluster - support for the value UserAssigned in the identity.type property (#25940)
• azurerm_pim_active_role_assignment - remove hard dependency on the roleAssignmentScheduleRequests API, so that role assignments will not become unmanageable over time (#25956)
• azurerm_pim_eligible_role_assignment - remove hard dependency on the roleEligibilityScheduleRequests API, so that role assignments will not become unmanageable over time (#25956)
• azurerm_windows_function_app - support for the PowerShell 7.4 (#25980)

BUG FIXES:

• azurerm_container_app_job - Allow event_trigger_config.scale.min_executions to be 0 (#25931)
• azurerm_container_app_job - update validation to allow the replica_retry_limit property to be set to 0 (#25984)
• azurerm_data_factory_trigger_custom_event - one of subject_begins_with and subject_ends_with no longer need to be set (#25932)
• azurerm_kubernetes_cluster_node_pool - prevent race condition by checking the virtual network status when creating a node pool with a subnet ID (#25888)
• azurerm_postgresql_flexible_server - fix for default storage_tier value when storage_mb field has been changed (#25947)
• azurerm_pim_active_role_assignment - resolve a number of potential crashes (#25956)
• azurerm_pim_eligible_role_assignment - resolve a number of potential crashes (#25956)
• azurerm_redis_enterprise_cluster_location_zone_support - add Central India zones support (#26000)
• azurerm_sentinel_alert_rule_scheduled - the alert_rule_template_version property is no longer ForceNew (#25688)
• azurerm_storage_sync_server_endpoint - preventing a crashed due to initial_upload_policy (#25968)

3.103.1 (May 10, 2024)

BUG FIXES

• loadtest - fixing an issue where the SDK Clients weren't registered (#25920)

3.103.0 (May 09, 2024)

FEATURES:

• New Resource: azurerm_container_app_job (#23871)
• New Resource: azurerm_container_app_environment_custom_domain (#24346)
• New Resource: azurerm_data_factory_credential_service_principal (#25805)
• New Resource: azurerm_network_manager_connectivity_configuration (#25746)
• New Resource: azurerm_maintenance_assignment_dynamic_scope (#25467)
• New Resource: azurerm_virtual_machine_gallery_application_assignment (#22945)
• New Resource: azurerm_virtual_machine_automanage_configuration_assignment (#25480)

ENHANCEMENTS:

• provider - support for the recover_soft_deleted_backup_protected_vm feature (#24157)
• dependencies: updating github.com/hashicorp/go-azure-helpers to v0.69.0 (#25903)
• loganalytics - update cluster resource to api version 2022-01-01 (#25686)
• azurerm_bastion_host - support for the kerberos_enabled property (#25823)
• azurerm_container_app - secrets can now be removed (#25743)
• azurerm_container_app_environment - support for the custom_domain_verification_id property (#24346)
• azurerm_linux_virtual_machine - support for the additional capability hibernation_enabled (#25807)
• azurerm_linux_virtual_machine - support for additional values for the license_type property (#25909)
• azurerm_linux_virtual_machine_scale_set - support for the maximum_surge_instances property for vmss rolling upgrades (#24914)
• azurerm_windows_virtual_machine - support for the additional capability hibernation_enabled (#25807)
• azurerm_windows_virtual_machine_scale_set - support for the maximum_surge_instances_enabled property for vmss rolling upgrades (#24914)
• azurerm_storage_account - support for the permanent_delete_enabled property within retention policies (#25778)

BUG FIXES:

• azurerm_kubernetes_cluster - erase load_balancer_profile when changing network_profile.outbound_type from loadBalancer to another outbound type (#25530)
• azurerm_log_analytics_saved_search - the function_parameters property now repsects the order of elements (#25869)
• azurerm_linux_web_app - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_linux_web_app_slot - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_monitor_private_link_scoped_service - normalize case of the linked_resource_id property during reads (#25787)
• azurerm_role_assignment - add addtional retry logic to assist with cross-tenant use (#25853)
• azurerm_web_pubsub_network_acl - fixing a crash when networkACL.PublicNetwork.Deny was nil (#25886)
• azurerm_windows_web_app - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_windows_web_app_slot - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)

DEPRECATIONS:

• azurerm_subnet - the private_endpoint_network_policies_enabled property has been deprecated in favour of the private_endpoint_network_policies property (#25779)

3.102.0 (May 02, 2024)

FEATURES:

• New Resource: azurerm_storage_sync_server_endpoint (#25831)
• New Resource: azurerm_storage_container_immutability_policy (#25804)

ENHANCEMENTS:

• azurerm_load_test - add support for encryption (#25759)
• azurerm_network_connection_monitor - update validation for target_resource_type and target_resource_id (#25745)
• azurerm_mssql_managed_database - support for a Restorable Database ID to be used as the source_database_id for point in time restore (#25568)
• azurerm_storage_account - support for the managed_hsm_key_id property (#25088)
• azurerm_storage_account_customer_managed_key - support for the managed_hsm_key_id property (#25088)

BUG FIXES:

• azurerm_linux_function_app - now sets docker registry url in linux_fx_version by default (#23911)
• azurerm_resource_group - work around sporadic eventual consistency errors (#25758)

DEPRECATIONS:

• azurerm_key_vault_managed_hardware_security_module_role_assignment - the vault_base_url property has been deprecated in favour of the managed_hsm_id property (#25601)

3.101.0 (April 25, 2024)

ENHANCEMENTS:

• dependencies: updating to v0.20240424.1114424 of github.com/hashicorp/go-azure-sdk (#25749)
• dependencies: updating to v0.27.0 of github.com/tombuildsstuff/giovanni (#25702)
• dependencies: updating golang.org/x/net to 0.23.0
• azurerm_cognitive_account - the kind property now supports ConversationalLanguageUnderstanding (#25735)
• azurerm_container_app_custom_domain - support the ability to use Azure Managed Certificates (#25356)

BUG FIXES:

• Data Source: azurerm_application_insights - set correct AppID in data source (#25687)
• azurerm_virtual_network - suppress diff in ordering for address_space due to inconsistent API response (#23793)
• azurerm_storage_data_lake_gen2_filesystem - add context deadline for import (#25712)
• azurerm_virtual_network_gateway - preserve existing nat_rules on updates (#25690)

3.100.0 (April 18, 2024)

ENHANCEMENTS:

• dependencies: updating hashicorp/go-azure-sdk to v0.20240417.1084633 (#25659)
• compute - update Virtual Machine and Virtual Machine Scale Set resources and data sources to use hashicorp/go-azure-sdk (#25533)
• machine_learning - Add new machine_learning block that supports purge_soft_deleted_workspace_on_destroy (#25624)
• loganalytics - update cluster resource to use hashicorp/go-azure-sdk (#23373)
• Data Source: azurerm_management_group - now exports the tenant_scoped_id attribute (#25555)
• azurerm_container_app - the ingress.ip_security_restriction.ip_address_range property will now accept an IP address as valid input (#25609)
• azurerm_container_group - the identity block can now be updated (#25543)
• azurerm_express_route_connection - support for the private_link_fast_path_enabled property (#25596)
• azurerm_hdinsight_hadoop_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_hbase_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_interactive_query_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_kafka_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_spark_cluster - support for the private_link_configuration block (#25629)
• azurerm_management_group - now exports the tenant_scoped_id attribute (#25555)
• azurerm_monitor_activity_log_alert - support for the location property (#25389)
• azurerm_mysql_flexible_server - update validating regex for sku_name (#25642)
• azurerm_postgresql_flexible_server - support for the GeoRestore create_mode (#25664)
• azurerm_virtual_network_gateway_connection - support for the private_link_fast_path_enabled property (#25650)
• azurerm_windows_web_app - support for the handler_mapping block (#25631)
• azurerm_windows_web_app_slot - support for the handler_mapping block (#25631)

BUG FIXES:

• storage: prevent a bug causing the second storage account key to be used for authentication instead of the first (#25652)
• azurerm_active_directory_domain_service - prevent an issue where filtered_sync_enabled was not being updated (#25594)
• azurerm_application_insights - add a state migration to fix the resource ID casing of Application Insights resources (#25628)
• azurerm_function_app_hybrid_connection - can now use relay resources created in a different resource group (#25541)
• azurerm_kubernetes_cluster_node_pool - prevent plan diff when the windows_profile.outbound_nat_enabled property is unset (#25644)
• azurerm_machine_learning_compute_cluster - fix location to point to parent resource for computes (#25643)
• azurerm_machine_learning_compute_instance - fix location to point to parent resource for computes (#25643)
• azurerm_storage_account - check replication type when evaluating support level for shares and queues for V1 storage accounts (#25581)
• azurerm_storage_account - added a sanity check for dns_endpoint_type and blob_properties.restore_policy (#25450)
• azurerm_web_app_hybrid_connection - can now use relay resources created in a different resource group (#25541)
• azurerm_windows_web_app - prevent removal of site_config.application_stack.node_version when app_settings are updated (#25488)
• azurerm_windows_web_app_slot - prevent removal of site_config.application_stack.node_version when app_settings are updated (#25489)

DEPRECATIONS:

• logz - the Logz resources are deprecated and will be removed in v4.0 of the AzureRM Provider since the API no longer allows new instances to be created (#25405)
• azurerm_machine_learning_compute_instance - marked the location field as deprecated in v4.0 of the provider (#25643)
• azurerm_kubernetes_cluster - the following properties have been deprecated since the API no longer supports cluster creation with legacy Azure Entra integration: client_app_id, server_app_id, server_app_secret and managed (#25200)

3.99.0 (April 11, 2024)

BREAKING CHANGE:

• azurerm_linux_web_app - site_config.0.application_stack.0.java_version must be specified with java_server and java_server_version (#25553)

ENHANCEMENTS:

• dependencies: updating to v0.20240411.1104331 of github.com/hashicorp/go-azure-sdk/resourcemanager and github.com/hashicorp/go-azure-sdk/sdk (#25546)
• dependencies: updating to v0.26.1 of github.com/tombuildsstuff/giovanni (#25551)
• azurerm_key_vault - deprecate the contact property from v3.x provider and update properties to Computed & Optional (#25552)
• azurerm_key_vault_certificate_contacts - in v4.0 make the contact property optional to allow for deletion of contacts from the key vault (#25552)
• azurerm_signalr_service - support for setting the sku property to Premium_P2 (#25578)
• azurerm_snapshot - support for the network_access_policy and public_network_access_enabled properties (#25421)
• azurerm_storage_account - extend the support level of (blob|queue|share)_properties for Storage kind (#25427)
• azurerm_storage_blob - support for the encryption_scope property (#25551)
• azurerm_storage_container - support for the default_encryption_scope and encryption_scope_override_enabled properties (#25551)
• azurerm_storage_data_lake_gen2_filesystem - support for the default_encryption_scope property (#25551)
• azurerm_subnet - the delegation.x.service_delegation.x.name property now supports Oracle.Database/networkAttachments (#25571)
• azurerm_web_pubsub - support setting the sku property to Premium_P2 (#25578)

BUG FIXES:

• provider: fix an issue where the provider was not correctly configured when using a custom metadata host (#25546)
• storage: fix a number of potential crashes during plan/apply with resources using the Storage data plane API (#25525)
• azurerm_application_insights - fix issue where the wrong Application ID was set into the property app_id (#25520)
• azurerm_application_insights_api_key - add a state migration to re-case static segments of the resource ID (#25567)
• azurerm_container_app_environment_certificate - the subject_name attribute is now correctly populated (#25516)
• azurerm_function_app_slot - will now taint the resource when partially created (#24520)
• azurerm_linux_function_app - will now taint the resource when partially created (#24520)
• azurerm_managed_disk - filtering the Resource SKUs response to reduce the memory overhead, when determining whether a Managed Disk can be online resized or not (#25549)
• azurerm_monitor_alert_prometheus_rule_group - the severity property is now set correctly when 0 (#25408)
• azurerm_monitor_smart_detector_alert_rule - normalising the value for id within the action_group block (#25559)
• azurerm_redis_cache_access_policy_assignment - the object_id_alias property now allows usernames (#25523)
• azurerm_windows_function_app - will not taint the resource when partially created (#24520)
• azurerm_windows_function_app - will not taint the resource when partially created (#24520)

DEPRECATIONS:

• azurerm_cosmosdb_account - the connection_strings property has been superseded by the primary and secondary connection strings for sql, mongodb and readonly (#25510)
• azurerm_cosmosdb_account - the enable_free_tier property has been superseded by free_tier_enabled (#25510)
• azurerm_cosmosdb_account - the enable_multiple_write_locations property has been superseded by multiple_write_locations_enabled (#25510)
• azurerm_cosmosdb_account - the enable_automatic_failover property has been superseded by automatic_failover_enabled (#25510)

3.98.0 (April 04, 2024)

FEATURES:

• New Resource: azurerm_static_web_app_function_app_registration (#25331)
• New Resource: azurerm_system_center_virtual_machine_manager_inventory_items (#25110)
• New Resource: azurerm_workloads_sap_discovery_virtual_instance (#24342)
• New Resource: azurerm_redis_cache_policy (#25477)
• New Resource: azurerm_redis_cache_policy_assignment (#25477)

ENHANCEMENTS:

• dependencies: updating to v0.20240402.1085733 of github.com/hashicorp/go-azure-sdk (#25482)
• dependencies: updating to v0.67.0 of github.com/hashicorp/go-azure-helpers (#25446)
• dependencies: updating to v0.25.4 of github.com/tombuildsstuff/giovanni (#25404)
• alertsmanagement - updating remaining resources to use hashicorp/go-azure-sdk (#25486)
• applicationinsights - updating remaining resources to use hashicorp/go-azure-sdk (#25376)
• compute - update to API version 2024-03-01 (#25436)
• compute - update shared image resources and data sources to use hashicorp/go-azure-sdk (#25503)
• containerinstance - update to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#25416)
• maintenance - updating to API Version 2023-04-01 (#25388)
• recovery_services - Add recovery_service block to the provider that supports vm_backup_stop_protection_and_retain_data_on_destroy and purge_protected_items_from_vault_on_destroy(#25515)
• storage - the Storage Account cache is now populated using hashicorp/go-azure-sdk (#25437)
• azurerm_bot_service_azure_bot - support for the cmk_key_vault_key_url property (#23640)
• azurerm_capacity_reservation - update validation for capacity (#25471)
• azurerm_container_app - add support for key_vault_id and identity properties in the secret block (#24773)
• azurerm_databricks_workspace - expose managed_services_cmk_key_vault_id and managed_disk_cmk_key_vault_id and key_vault_id to support cross subscription CMK's. (#25091)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - expose key_vault_id to support cross subscription CMK's. (#25091)
• azurerm_managed_hsm_role_*_ids - use specific resource id to replace generic nested item id (#25323)
• azurerm_mssql_database - add support for secondary_type (#25360)
• azurerm_monitor_scheduled_query_rules_alert_v2 - support for the identity block (#25365)
• azurerm_mssql_server_extended_auditing_policy - support for audit_actions_and_groups and predicate_expression (#25425)
• azurerm_netapp_account - can now be imported (#25384)
• azurerm_netapp_volume - support for the kerberos_enabled, smb_continuous_availability_enabled, kerberos_5_read_only_enabled, kerberos_5_read_write_enabled, kerberos_5i_read_only_enabled, kerberos_5i_read_write_enabled, kerberos_5p_read_only_enabled, and kerberos_5p_read_write_enabled properties (#25385)
• azurerm_recovery_services_vault - upgrading to version 2024-01-01 (#25325)
• azurerm_stack_hci_cluster - the client_id property is now optional (#25407)
• azurerm_storage_encryption_scope - refactoring to use hashicorp/go-azure-sdk rather than Azure/azure-sdk-for-go (#25437)
• azurerm_mssql_elasticpool - the maintenance_configuration_name property now supports values SQL_SouthAfricaNorth_DB_1, SQL_SouthAfricaNorth_DB_2, SQL_WestUS3_DB_1 and SQL_WestUS3_DB_2 (#25500)
• azurerm_lighthouse_assignment - updating API Version from 2019-06-01 to 2022-10-01 (#25473)

BUG FIXES:

• network - updating the GatewaySubnet validation to show the Subnet Name when the validation fails (#25484)
• azurerm_function_app_hybrid_connection - fix an issue during creation when send_key_name is specified (#25379)
• azurerm_linux_web_app_slot - fix a crash when upgrading the provider to v3.88.0 or later (#25406)
• azurerm_mssql_database - update the behavior of the enclave_type field. (#25508)
• azurerm_mssql_elasticpool - update the behavior of the enclave_type field. (#25508)
• azurerm_network_manager_deployment - add locking (#25368)
• azurerm_resource_group_template_deployment - changes to parameters_content and template_content now force output_content to be updated in the plan (#25403)
• azurerm_storage_blob - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_container - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_data_lake_gen2_filesystem - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_data_lake_gen2_filesystem_path - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_queue - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_share - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_share_directory - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_share_directory - resolve an issue where directories might fail to destroy (#25404)
• azurerm_storage_share_file - fix a potential crash when the endpoint is unreachable (#25404)
• azurerm_storage_share_file - fix several bugs with path handling when creating files in subdirectories (#25404)
• azurerm_web_app_hybrid_connection - fix an issue during creation when send_key_name is specified (#25379)
• azurerm_windows_web_app - prevent a panic during resource upgrade (#25509)

3.97.1 (March 22, 2024)

ENHANCEMENTS:

• azurerm_nginx_deployment - support for the configuration block (#24276)

BUG FIXES:

• azurerm_data_factory_integration_runtime_self_hosted - ensure that autorizationh keys are exported (#25246)
• azurerm_storage_account - defaulting the value for dns_endpoint_type to Standard when it's not returned from the Azure API (#25367)

3.97.0 (March 21, 2024)

BREAKING CHANGES:

• azurerm_linux_function_app - app_settings["WEBSITE_RUN_FROM_PACKAGE"] must be added to ignore_changes for deployments where an external tool modifies the WEBSITE_RUN_FROM_PACKAGE property in the app_settings block. (#24848)
• azurerm_linux_function_app_slot - app_settings["WEBSITE_RUN_FROM_PACKAGE"] must be added to ignore_changes for deployments where an external tool modifies the WEBSITE_RUN_FROM_PACKAGE property in the app_settings block. (#24848)

FEATURES:

• New Resource: azurerm_elastic_san_volume (#24802)

ENHANCEMENTS:

• dependencies: updating to v0.25.3 of github.com/tombuildsstuff/giovanni (#25362)
• dependencies: updating to v0.20240321.1145953 of github.com/hashicorp/go-azure-sdk (#25332)
• dependencies: updating to v0.25.2 of github.com/tombuildsstuff/giovanni (#25305)
• azurestackhci: updating to API Version 2024-01-01 (#25279)
• monitor/scheduledqueryrules: updating to API version 2023-03-15-preview (#25350)
• cosmosdb: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#25166)
• Data Source azurerm_stack_hci_cluster: refactoring the association to use hashicorp/go-azure-sdk (#25293)
• azurerm_app_configuration - support for Environments other than Azure Public (#25271)
• azurerm_automanage_configuration - refactoring to use hashicorp/go-azure-sdk (#25293)
• azurerm_container_app_environment - add support for Consumption workload profile (#25285)
• azurerm_cosmosdb_postgresql_cluster - expose list of server names and FQDN in the servers block (#25240)
• azurerm_data_share - hyphens are now allowed in the resource's name (#25242)
• azurerm_data_factory_integration_runtime_azure_ssis - support for the copy_compute_scale and pipeline_external_compute_scale blocks (#25281)
• azurerm_healthcare_service - support for the identity and configuration_export_storage_account_name properties (#25193)
• azurerm_nginx_deployment - support the auto_scale_profile block (#24950)
• azurerm_netapp_account_resource - support for the kerberos_ad_name, kerberos_kdc_ip property, enable_aes_encryption, local_nfs_users_with_ldap_allowed, server_root_ca_certificate, ldap_over_tls_enabled, and ldap_signing_enabled properties (#25340)
• azurerm_netapp_account_resource - support for [Support for Azure Netapp Files - AD Site Name #12462] via the site_name property (#25340)
• azurerm_stack_hci_cluster: refactoring the association to use hashicorp/go-azure-sdk (#25293)
• azurerm_storage_account - support for the dns_endpoint_type property (#22583)
• azurerm_storage_blob_inventory_policy - refactoring to use hashicorp/go-azure-sdk (#25268)
• azurerm_synapse_spark_pool - added support for 3.4 (#25319)

BUG FIXES:

• Data Source: azurerm_storage_blob - fix a bug that incorrectly parsed the endpoint in the resource ID (#25283)
• Data Source: azurerm_storage_table_entity - fixing a regression when parsing the table endpoint (#25307)
• netapp_account_resource - correct the smb_server_name property validation (#25340)
• azurerm_backup_policy_file_share - prevent a bug when the include_last_days property does not work when days is empty (#25280)
• azurerm_backup_policy_vm - prevent a bug when the include_last_days property does not work when days is empty (#25280)
• azurerm_container_app_custom_domain - prevent an issue where the secret was not being passed through (#25196) (#25251)
• azurerm_data_protection_backup_instance_kubernetes_cluster - prevent the protection errosr ScenarioPluginInvalidWorkflowDataRequest and UserErrorKubernetesBackupExtensionUnhealthy [azurerm_data_protection_backup_instance_kubernetes_cluster is created with message "Fix protection error for the backup instance" and code ScenarioPluginInvalidWorkflowDataRequest #25294] (#25345)
• azurerm_purview_account - will now allow for PurView accounts with missing or disabled eventhubs without keys (#25301)
• azurerm_storage_account - fix a crash when the storage account becomes unavailable whilst reading (#25332)
• azurerm_storage_blob - fixing a regression where blobs within a nested directory wouldn't be parsed correctly (#25305)
• azurerm_storage_data_lake_gen2_path - fixing a bug where there was no timeout available during import (#25282)
• azurerm_storage_queue - fixing a bug where the Table URI was obtained rather than the Queue URI (#25262)
• azurerm_subscription - fixing an issue when creating a subscription alias (#25181)

3.96.0 (March 14, 2024)

ENHANCEMENTS:

• dependencies: updating to v0.20240314.1083835 of github.com/hashicorp/go-azure-sdk (#25255)
• dependencies: updating to v0.25.1 of github.com/tombuildsstuff/giovanni (#24798)
• dependencies: updating to v1.33.0 of google.golang.org/protobuf (#25243)
• storage: updating the data plane resources to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24798)
• Data Source: azurerm_storage_table_entities - support for AAD authentication (#24798)
• Data Source: azurerm_storage_table_entity - support for AAD authentication (#24798)
• azurerm_kusto_cluster - support None pattern for the virtual_network_configuration block (#24733)
• azurerm_linux_function_app - support for the Node 20 runtime (#24073)
• azurerm_linux_function_app_slot - support for the Node 20 runtime (#24073)
• azurerm_stack_hci_cluster - support the identity, cloud_id, service_endpoint and resource_provider_object_id properties (#25031)
• azurerm_storage_share_file - support for AAD authentication (#24798)
• azurerm_storage_share_directory - support for AAD authentication, deprecate share_name and storage_account_name in favor of storage_share_id (#24798)
• azurerm_storage_table_entity - support for AAD authentication, deprecate share_name and storage_account_name in favor of storage_table_id (#24798)
• azurerm_storage_table_entity - support for AAD authentication (#24798)
• azurerm_windows_function_app - support for the Node 20 runtime (#24073)
• azurerm_windows_function_app_slot - support for the Node 20 runtime (#24073)
• azurerm_windows_web_app - support for the Node 20 runtime (#24073)
• azurerm_windows_web_app_slot - support for the Node 20 runtime (#24073)

BUG FIXES:

• azurerm_container_app_custom_domain - fix resource ID parsing bug preventing import (#25192)
• azurerm_windows_web_app - fix incorrect warning message when checking name availability (#25214)
• azurerm_virtual_machine_run_command - prevent a bug during updates (#25186)
• Data Source: azurerm_storage_table_entities - Fix items.x.properties truncating to one entry (#25211)

3.95.0 (March 08, 2024)

FEATURES:

• New Resource: azurerm_container_app_custom_domain (#24421)
• New Resource: azurerm_data_protection_backup_instance_kubernetes_cluster (#24940)
• New Resource: azurerm_static_web_app (#25117)
• New resource: azurerm_static_web_app_custom_domain (#25117)
• New resource: azurerm_system_center_virtual_machine_manager_availability_set (#24975)
• New Resource: azurerm_workloads_sap_three_tier_virtual_instance (#24384)
• New Resource: azurerm_workloads_sap_single_node_virtual_instance (#24331)

ENHANCEMENTS:

• dependencies: updating to v0.20240229.1102109 of github.com/hashicorp/go-azure-sdk (#25102)
• monitor: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest [GH-#25102]
• network: updating to API Version 2023-09-01 (#25095)
• azurerm_data_factory_integration_runtime_managed - support for the credential_name property (#25033)
• azurerm_linux_function_app - support for the description property in the ip_restriction block (#24527)
• azurerm_linux_function_app - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_linux_function_app_slot - support for the description property in the ip_restriction block (#24527)
• azurerm_linux_function_app_slot - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_linux_web_app - support for the description property in the ip_restriction block (#24527)
• azurerm_linux_web_app - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_linux_web_app_slot - support for the description property in the ip_restriction block (#24527)
• azurerm_linux_web_app_slot - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_mysql_flexible_server - setting the storage.size_gb property to a smaller value now forces a new resource to be created (#25074)
• azurerm_orbital_contact_profile - changing the channels property no longer creates a new resource (#25129)
• azurerm_private_dns_resolver_inbound_endpoint - the private_ip_address property is no longer required when private_ip_allocation_method is Dynamic (#25035)
• stream_analytics_output_blob - support for the blob_write_mode property (#25127)
• azurerm_windows_function_app - support for the description property in the ip_restriction block (#24527)
• azurerm_windows_function_app - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_windows_function_app_slot - support for the description property in the ip_restriction block (#24527)
• azurerm_windows_function_app_slot - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_windows_web_app - support for the description property in the ip_restriction block (#24527)
• azurerm_windows_web_app - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)
• azurerm_windows_web_app_slot - support for the description property in the ip_restriction block (#24527)
• azurerm_windows_web_app_slot - support for the ip_restriction_default_action and scm_ip_restriction_default_action properties (#25131)

BUG FIXES:

• Data Source: azurerm_function_app_host_keys - correctly set event_grid_extension_key by searching for the renamed property in the API response (#25108)
• azurerm_app_service_public_certificate - fix issue where certificate information was not being set correctly in the read (#24943)
• azurerm_container_registry - prevent recreation of the resource when the georeplication.tags are updated (#24994)
• azurerm_firewall_policy_rule_collection_group - fix issue where the client subscription ID was used to construct the firewall_policy_id (#25145)
• azurerm_function_app_hybrid_connection - fix issue where SendKeyValue was not populated in the API payload (#23761)
• azurerm_orbital_contact_profile - fix creation of the resource when event_hub_uri is not specified (#25128)
• azurerm_recovery_services_vault - prevent a panic when immutability is updated (#25132)
• azurerm_storage_account - fix issue where the queue encryption key type was set as the table encryption key type (#25046)
• azurerm_web_app_hybrid_connection - fix issue where SendKeyValue was not populated in the API payload (#23761)
• azurerm_mssql_database - fix incorrect error due to typo when using restore_long_term_retention_backup_id (#25180)

DEPRECATIONS:

• Deprecated Resource: azurerm_static_site (#25117)
• Deprecated Resource: azurerm_static_site_custom_domain (#25117)
• azurerm_kubernetes_fleet_manager - the hub_profile property has been deprecated (#25010)

3.94.0 (February 29, 2024)

FEATURES:

• New Resource: azurerm_kubernetes_fleet_update_run (#24813)

ENHANCEMENTS:

• dependencies: updating to v0.20240228.1142829 of github.com/hashicorp/go-azure-sdk (#25081)
• servicefabric: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#25002)
• springcloud: updating to API Version 2024-01-01-preview (#24937)
• securitycenter: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#25081)
• Data Source: azurerm_storage_table_entities - support for select (#24987)
• Data Source: azurerm_netapp_volume - support for the smb_access_based_enumeration and smb_non_browsable properties (#24514)
• azurerm_cosmosdb_account - add support for the minimal_tls_version property (#24966)
• azurerm_federated_identity_credential - the federated credentials can now be changed without creating a new resource (#25003)
• azurerm_kubernetes_cluster - support for the current_kubernetes_version property (#25079)
• azurerm_kubernetes_cluster - private DNS is now allowed for the web_app_routing property (#25038)
• azurerm_kubernetes_cluster - migration between different outbound_types is now allowed (#25021)
• azurerm_mssql_database - support for the recovery_point_id and restore_long_term_retention_backup_id properties (#24904)
• azurerm_linux_virtual_machine - support for the automatic_upgrade_enabled, disk_controller_type, os_image_notification, treat_failure_as_deployment_failure_enabled, and vm_agent_platform_updates_enabledproperties (#23394)
• azurerm_nginx_deployment - support for the automatic_upgrade_channel property (#24867)
• azurerm_netapp_volume - support for the smb_access_based_enumeration and smb_non_browsable properties (#24514)
• azurerm_netapp_pool - support for the encryption_type property (#24993)
• azurerm_role_definition - upgrade to the API version 2022-05-01-preview (#25008)
• azurerm_redis_cache - allow AAD auth for all SKUs (#25006)
• azurerm_sql_managed_instance - support for the zone_redundant_enabled property (#25089)
• azurerm_spring_cloud_gateway - support for the application_performance_monitoring_ids property (#24919)
• azurerm_spring_cloud_configuration_service - support for the refresh_interval_in_seconds property (#25009)
• azurerm_synapse_workspace - support for using the user_assigned_identity_id property within the customer_managed_key block (#25027)
• azurerm_windows_virtual_machine - support for the automatic_upgrade_enabled, disk_controller_type, os_image_notification, treat_failure_as_deployment_failure_enabled, and vm_agent_platform_updates_enabledproperties (#23394)

BUG FIXES:

• azurerm_api_management_notification_recipient_email - fixing an issue where response pages weren't iterated over correctly (#25055)
• azurerm_api_management_notification_recipient_user - fixing an issue where response pages weren't iterated over correctly (#25055)
• azurerm_batch_pool - fix setting the extension.settings_json property (#24976)
• azurerm_key_vault_key - expiration_date can be updated if newer date is ahead (#25000)
• azurerm_pim_active_role_assignment - fix an isue where the resource would disappear or fail to import after 45 days (#24524)
• azurerm_pim_eligible_role_assignment - fix an isue where the resource would disappear or fail to import after 45 days (#24524)
• azurerm_recovery_services_vault - validate that use_system_assigned_identity and user_assigned_identity_id cannot be set at the same time (#24091)
• azurerm_recovery_vaults will now create properly with SystemAssigned,UserAssigned identity (#24978)
• azurerm_subscription - fixing an issue where response pages weren't iterated over correctly (#25055)

3.93.0 (February 22, 2024)

FEATURES:

• New Data Source: azurerm_express_route_circuit_peering (#24971)
• New Data Source: azurerm_storage_table_entities (#24973)
• New Resource: azurerm_dev_center_catalog (#24833)
• New Resource: azurerm_system_center_virtual_machine_manager_server (#24278)

BUG FIXES:

• azurerm_key_vault - conditionally polling the Data Plane endpoint when public_network_access_enabled is set to false (#23823)
• azurerm_storage_account - allow the identity.type property to be SystemAssigned, UserAssigned when using a Customer Managed Key (#24923)
• azurerm_automation_account - prevent the identity.identity_ids User Assigned identity being set when not specified in config (#24977)

ENHANCEMENTS:

• dependencies: updating to v0.20240221.1170458 of hashicorp/go-azure-sdk (#24967)
• dependencies: refactor azurerm_spring_cloud_configuration_service to use go-azure-sdk (#24918)
• provider: support or the feature flag virtual_machine_scale_set.reimage_on_manual_upgrade (#22975)
• sentinel: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24962)
• sqlvirtualmachines: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24912)
• nginx : updating to use 2024-01-01-preview (#24868)
• azurerm_cosmosdb_account - support for the backup.tier property (#24595)
• azurerm_linux_virtual_machine - the virtual_machine_scale_set_id proeprty can now be changed without creating a new resource (#24768)
• azurerm_machine_learning_workspace - support for the managed_network.isolation_mode property (#24951)
• azurerm_private_dns_resolver_inbound_endpoint - support the static value for the private_ip_allocation_method property (#24952)
• azurerm_postgresql_flexible_server - expose the storage_tier field (#24892)
• azurerm_redis_cache - support for the preferred_data_persistence_auth_method property (#24370)
• azurerm_servicebus_namespace - support for the premium_messaging_partitions property (#24676)
• azurerm_windows_virtual_machine - the virtual_machine_scale_set_id proeprty can now be changed without creating a new resource (#24768)

BUG FIXES:

• azurerm_cognitive_deployment - the version_upgrade_option property can not be updated without creating a new resource (#24922)
• azurerm_data_protection_backup_vault - support or the soft_delete and retention_duration_in_days properties (#24775)
• azurerm_data_factory_pipeline - correctly handle incorrect header values (#24921)
• azurerm_kusto_cluster - optimized_auto_scale is now updated after sku has been updated (#24906)
• azurerm_key_vault_certificate - will now only update the lifetime_action of the certificate block unless otherwise required (#24755)
• azurerm_linux_virtual_machine_scale_set - correctly include public_ip_prefix_id during updates (#24939)
• azurerm_postgresql_flexible_server - the customer_managed_key.key_vault_key_id property is now required (#24981)
• azurerm_nginx_deployment - changing the sku property now creates a new resource (#24905)
• azurerm_orchestrated_virtual_machine_scale_set - the disk_size_gb and lun parameters of data_disks are optional now (#24944)
• azurerm_storage_account - change order of API calls to be GET-then-PUT ratehr then PATCHES (#23935)
• azurerm_storage_account - improve the validation around the immutability_policy being used with blob_properties (#24938)
• azurerm_security_center_setting - prevent a bug when name is SENTINEL (#24497)
• azurerm_windows_virtual_machine_scale_set - correctly include public_ip_prefix_id during updates (#24939)

3.92.0 (February 15, 2024)

FEATURES:

• New Data Source: azurerm_virtual_desktop_application_group (#24771)

ENHANCEMENTS:

• provider: support for the feature flag postgresql_flexible_server.restart_server_on_configuration_value_change property (#23811)
• dependencies: updating to v0.20240214.1142753 of github.com/hashicorp/go-azure-sdk (#24889)
• automation: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24858)
• maintenance: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24819)
• containerapps: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24862)
• containerservices: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24872)
• timeseriesinsights: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24889)
• azurerm_container_app_environment: support for the infrastructure_resource_group_name property (#24361)
• azurerm_cost_anomaly_alert - support for the subscription_id property (#24258)
• azurerm_cosmosdb_account - add default values for the consistency_policy code block (#24830)
• azurerm_dashboard_grafana - support for the smtp block (#24717)
• azurerm_key_vault_certificates - support for the tags property (#24857)
• azurerm_key_vault_secrets - support for the tags property (#24857)
• azurerm_orchestrated_virtual_machine_scale_set - support for the additional_unattend_content block (#24292)
• azurerm_virtual_desktop_host_pool - support for the vm_template property (#24369)

BUG FIXES:

• azurerm_container_app_environment: avoid unwanted changes when updating and using log_analytics_workspace_id (#24303)
• azurerm_cosmosdb_account - fixed regression in the backup code block (#24830)
• azurerm_data_factory - allow the git_url property to be blank/empty (#24879)
• azurerm_linux_web_app_slot - the worker_count property now works correctly in the site_config block (#24515)
• azurerm_linux_web_app - support off for the file_system_level property (#24877)
• azurerm_linux_web_app_slot - support off for the file_system_level property (#24877)
• azurerm_private_endpoint - fixing an issue where updating the Private Endpoint would remove any Application Security Group Association (#24846)
• azurerm_search_service - fixed the update function to adjust for changed API behaviour (#24837)
• azurerm_search_service - fixed the update function to adjust for changed API behaviour (#24903)
• azurerm_windows_web_app - support off for the file_system_level property (#24877)
• azurerm_windows_web_app_slot - support off for the file_system_level property (#24877)

3.91.0 (February 08, 2024)

FEATURES:

• New Data Source: azurerm_databricks_access_connector (#24769)
• New Resource: azurerm_data_protection_backup_policy_kubernetes_cluster (#24718)
• New Resource: azurerm_chaos_studio_experiment (#24779)
• New Resource: azurerm_chaos_studio_capability (#24779)
• New Resource: azurerm_dev_center_gallery (#23760)
• New Resource: azurerm_kubernetes_fleet_member (#24792)
• New Resource: azurerm_iotcentral_organization (#23132)
• New Resource: azurerm_spring_cloud_app_dynamics_application_performance_monitoring (#24750)

ENHANCEMENTS:

• dependencies: updating to v0.20240208.1095436 of github.com/hashicorp/go-azure-sdk/resource-manager (#24819)
• dependencies: updating to v0.20240208.1095436 of github.com/hashicorp/go-azure-sdk/sdk (#24819)
• dependencies: refactor azurerm_app_service_environment_v3 to use go-azure-sdk (#24760)
• dependencies: refactor azurerm_role_definition to use go-azure-sdk (#24266)
• managedhsm: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24761)
• hdinsight: updating to API Version 2023-07-01 (#24761)
• streamanalytics: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24819)
• azurerm_app_service_environment_v3 - support for the remote_debugging_enabled property (#24760)
• azurerm_storage_account - support for the local_user_enabled property (#24800)
• azurerm_log_analytics_workspace_table - support for the total_retention_in_days property (#24513)
• azurerm_maching_learning_workspace - support for the feature_store and kind properties (#24716)
• azurerm_traffic_manager_azure_endpoint - support for the always_serve_enabled property (#24573)
• azurerm_traffic_manager_external_endpoint - support for the always_serve_enabled property (#24573)

BUG FIXES:

• azurerm_api_management - the virtual_network_configuration property now updates correctly outside of virtual_network_type (#24569)

3.90.0 (February 01, 2024)

UPGRADE NOTES:

• provider - The provider will now automatically register the AppConfiguration, DataFactory, and SignalRService Resource Providers. When running Terraform with limited permissions, note that you must disable automatic Resource Provider Registration and ensure that any Resource Providers Terraform requires are registered. (#24645)

FEATURES:

• New Data Source: azurerm_nginx_configuration (#24642)
• New Data Source: azurerm_virtual_desktop_workspace (#24732)
• New Resource: azurerm_kubernetes_fleet_update_strategy (#24328)
• New Resource: azurerm_site_recovery_vmware_replicated_vm (#22477)
• New Resource: azurerm_spring_cloud_new_relic_application_performance_monitoring (#24699)

ENHANCEMENTS:

• provider: registering the Resource Provider Microsoft.AppConfiguration (#24645)
• provider: registering the Resource Provider Microsoft.DataFactory (#24645)
• provider: registering the Resource Provider Microsoft.SignalRService (#24645)
• provider: the Provider is now built using Go 1.21.6 (#24653)
• dependencies: the dependency github.com/hashicorp/go-azure-sdk has been split into multiple Go Modules - and as such will be referred to by those paths going forwards (#24636)
• dependencies: updating to ``v0.20240201.1064937ofgithub.com/hashicorp/go-azure-sdk/resource-manager` (#24738)
• dependencies: updating to v0.20240201.1064937 of github.com/hashicorp/go-azure-sdk/sdk (#24738)
• appservice: update to go-azure-sdk and API version 2023-01-01 (#24688)
• datafactory: updating to use tombuildsstuff/kermit (#24675)
• hdinsight: refactoring to use github.com/hashicorp/go-azure-sdk/resource-manager (#24011)
• hdinsight: updating to API Version 2021-06-01 (#24011)
• loadbalancer: updating to use hashicorp/go-azure-sdk (#24291)
• nginx: updating to API Version 2023-09-01 (#24640)
• servicefabricmanagedcluster: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24654)
• springcloud: updating to use API Version 2023-11-01-preview (#24690)
• subscriptions: refactoring to use hashicorp/go-azure-sdk (#24663)
• Data Source: azurerm_stream_analytics_job - support for User Assigned Identities (#24738)
• azurerm_cosmosdb_account - support for the gremlin_database and tables_to_restore properties (#24627)
• azurerm_bot_channel_email - support for the magic_code property (#23129)
• azurerm_cosmosdb_account - support for the partition_merge_enabled property (#24615)
• azurerm_mssql_managed_database - support for the immutable_backups_enabled property (#24745)
• azurerm_mssql_database - support for the immutable_backups_enabled property (#24745)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_panorama - support for the trusted_address_ranges property (#24459)
• azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - support for the trusted_address_ranges property (#24459)
• azurerm_palo_alto_next_generation_firewall_virtual_network_panorama - support for the trusted_address_ranges property (#24459)
• azurerm_servicebus_namespace - updating to use API Version 2022-10-01-preview (#24650)
• azurerm_spring_cloud_api_portal - support for the api_try_out_enabled property (#24696)
• azurerm_spring_cloud_gateway - support for the local_response_cache_per_route and local_response_cache_per_instance properties (#24697)
• azurerm_stream_analytics_job - support for User Assigned Identities (#24738)
• azurerm_subscription - refactoring to use hashicorp/go-azure-sdk to set tags on the subscription (#24734)
• azurerm_virtual_desktop_workspace - correctly validate the name property (#24668)

BUG FIXES:

• provider: skip registration for resource providers that are unavailable (#24571)
• azurerm_app_configuration - no longer require lifecycle_ignore_changes for the value property when using a key vault reference (#24702)
• azurerm_app_service_managed_certificate - fix casing issue in app_service_plan_id by parsing insensitively (#24664)
• azurerm_cognitive_deployment - updates now include the version property (#24700)
• azurerm_dns_cname_record - prevent casing issue in target_resource_id by parsing the ID insensitively (#24181)
• azurerm_mssql_managed_instance_failover_group - prevent an issue when trying to create a failover group with a managed instance from a different subscription (#24646)
• azurerm_storage_account - conditionally update properties only when needed (#24669)
• azurerm_storage_account - change update order for access_tierto prevent errors when uploading blobs to the archive tier (#22250)

3.89.0 (January 25, 2024)

FEATURES:

• New Data Source: azurerm_data_factory_trigger_schedule (#24572)
• New Data Source: azurerm_data_factory_trigger_schedules (#24572)
• New Data Source: azurerm_ip_groups (#24540)
• New Data Source: azurerm_nginx_certificate (#24577)
• New Resource: azurerm_chaos_studio_target (#24580)
• New Resource: azurerm_elastic_san_volume_group (#24166)
• New Resource: azurerm_netapp_account_encryption (#23733)
• New Resource: azurerm_redhat_openshift_cluster (#24375)

ENHANCEMENTS:

• dependencies: updating to v0.66.1 of github.com/hashicorp/go-azure-helpers (#24561)
• dependencies: updating to v0.20240124.1115501 of github.com/hashicorp/go-azure-sdk (#24619)
• bot: updating to API Version 2021-05-01-preview (#24555)
• containerservice: the SDK Clients now support logging (#24564)
• cosmosdb: updating to API Version 2023-04-15 (#24541)
• loadtestservice: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (and support logging) (#24578)
• managedidentity: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (and support logging) (#24578)
• azurerm_api_management_api - change the id format so specific revisions can be managed by Terraform (#23031)
• azurerm_data_protection_backup_vault - the redundancy propety can now be set to ZoneRedundant (#24556)
• azurerm_data_factory_integration_runtime_azure_ssis - support for the credential_name property (#24458)
• azurerm_orchestrated_virtual_machine_scale_set - support 2022-datacenter-azure-edition-hotpatch and 2022-datacenter-azure-edition-hotpatch-smalldisk hotpatching images (#23500)
• azurerm_stream_analytics_job - support for the sku_name property (#24554)

BUG FIXES:

• Data Source: azurerm_app_service - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• Data Source: azurerm_function_app - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• azurerm_app_configuration_key - the value for the value property can now be removed/emptied (#24582)

• azurerm_app_service - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• azurerm_app_service_plan - fix casing in serverFarms due to ID update (#24562)

• azurerm_app_service_slot - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• azurerm_automation_schedule - only one monthly_occurence block can now be specified (#24614)

• azurerm_cognitive_deployment - the model.version property is no longer required (#24264)

• azurerm_container_app - multiple custom_scale_rule can not be updated (#24509)

• azurerm_container_registry_task_schedule_run_now - prevent issue where the incorrect scheduled run in tracked if there have been multiple (#24592)

• azurerm_function_app - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• azurerm_function_app_slot - parsing the API Response for app_service_plan_id case-insensitively (#24626)

• azurerm_logic_app_standard - now will parse the app service ID insensitively (#24562)

• azurerm_logic_app_workflow - the workflow_parameters will now correctly handle information specified by $connections (#24141)

• azurerm_mssql_managed_instance_security_alert_policy - can not update empty storage attributes (#24553)

• azurerm_network_interface - the ip_configuration properties are no longer added to a Load Balancer Backend if one of those ip_configurations is associated with a backend (#24470)

3.88.0 (January 18, 2024)

FEATURES:

• New Data Source: azurerm_nginx_deployment (#24492)
• New Resource: azurerm_spring_cloud_dynatrace_application_performance_monitoring (#23889)
• New Resource: azurerm_virtual_machine_run_command (#23377)

ENHANCEMENTS:

• dependencies: updating to v0.20240117.1163544 of github.com/hashicorp/go-azure-sdk (#24481)
• dependencies: updating to v0.65.1 of github.com/hashicorp/go-azure-helpers (#24479)
• datashare: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24481)
• kusto: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#24477)
• Data Source: azurerm_application_gateway - support for the trusted_client_certificate.data property (#24474)
• azurerm_service_plan: refactoring to use hashicorp/go-azure-sdk (#24483)
• azurerm_container_group - support for the priority property (#24374)
• azurerm_mssql_managed_database - support for the point_in_time_restore property (#24535)
• azurerm_mssql_managed_instance - now exports the dns_zone attribute (#24435)
• azurerm_linux_web_app_slot - support for setting python_version to 3.12 (#24363)
• azurerm_linux_web_app - support for setting python_version to 3.12 (#24363)
• azurerm_linux_function_app_slot - support for setting python_version to 3.12 (#24363)
• azurerm_linux_function_app - support for setting python_version to 3.12 (#24363)

BUG FIXES:

• azurerm_application_gateway - the components property within the url block is no longer computed (#24480)
• azurerm_cdn_frontdoor_route - prevent an issue where cdn_frontdoor_origin_path gets removed on update if unchanged. (#24488)
• azurerm_cognitive_account - fixing support for the DC0 SKU (#24526)

3.87.0 (January 11, 2024)

FEATURES:

• New Data Source: azurerm_network_manager (#24398)
• New Resource: azurerm_security_center_server_vulnerability_assessments_setting (#24299)

ENHANCEMENTS:

• dependencies: updating to v0.20240111.1094251 of github.com/hashicorp/go-azure-sdk (#24463)
• Data Source: azurerm_mssql_database - support for identity, transparent_data_encryption_enabled, transparent_data_encryption_key_vault_key_id and transparent_data_encryption_key_automatic_rotation_enabled (#24412)
• Data Source: azurerm_mssql_server - support for transparent_data_encryption_key_vault_key_id (#24412)
• machinelearning: updating to API Version 2023-10-01 (#24416)
• paloaltonetworks: updating to API Version 2023-09-01 (#24290)
• azurerm_container_app - update create time validations for ingress.0.traffic_weight (#24042)
• azurerm_container_app- support for the ip_security_restriction block (#23870)
• azurerm_kubernetes_cluster - properties in default_node_pool.linux_os_config.sysctl_config are now updateable via node pool cycling (#24397)
• azurerm_linux_web_app - support the VS2022 value for the remote_debugging_version property (#24407)
• azurerm_mssql_database - support for identity, transparent_data_encryption_key_vault_key_id and transparent_data_encryption_key_automatic_rotation_enabled (#24412)
• azurerm_postgres_flexible_server - the sku_name property now supports being set to MO_Standard_E96ds_v5 (#24367)
• azurerm_role_assignment - support for the principal_type property (#24271)
• azurerm_windows_web_app - support the VS2022 value for the remote_debugging_version property (#24407)
• azurerm_cdn_frontdoor_firewall_policy - support for request_body_check_enabled property (#24406)

BUG FIXES:

• Data Source: azurerm_role_definition - fix role_definition_id (#24418)
• azurerm_api_management - the sku_name property can now be updated (#24431)
• azurerm_arc_kubernetes_flux_configuration - prevent a bug where certain sensitive properties for bucket and git_repository were being overwritten after an update to the resource is made (#24066)
• azurerm_kubernetes_flux_configuration - prevent a bug where certain sensitive properties for bucket and git_repository were being overwritten after an update to the resource is made (#24066)
• azure_linux_web_app - prevent a bug in App Service processing of application_stack in updates to site_config (#24424)
• azure_linux_web_app_slot - Fix bug in App Service processing of application_stack in updates to site_config (#24424)
• azurerm_network_manager_deployment - update creation wait logic to better tolerate the api returning not found (#24330)
• azurerm_virtual_machine_data_disk_attachment - do not update applications profile with disks (#24145)
• azure_windows_web_app - prevent a bug in App Service processing of application_stack in updates to site_config (#24424)
• azure_windows_web_app_slot - prevent a bug in App Service processing of application_stack in updates to site_config (#24424)
• azurerm_maintenance_configuration - set the reboot property in flatten from AlwaysReboot to Always (#24376)
• azurerm_container_app_environment - the workload_profile property can now be updated (#24409)

3.86.0 (January 04, 2024)

FEATURES:

• New Data Source: azurerm_dashboard_grafana (#24243)
• New Resource: azurerm_log_analytics_workspace_table (#24229)
• New Resource: azurerm_automation_powershell72_module (#23980)
• New Resource: azurerm_data_factory_credential_user_managed_identity (#24307)

ENHANCEMENTS:

• dependencies: updating to v0.20231215.1114251 of hashicorp/go-azure-sdk (#24251)
• dependencies: azurerm_spring_cloud_api_portal - update to use hashicorp/go-azure-sdk (#24321)
• Data Source: azurerm_kusto_cluster - now exports the identity block (#24314)
• azurerm_data_protection_backup_policy_postgresql - support for the time_zone property (#24312)
• azurerm_data_protection_backup_policy_disk - support for the time_zone property (#24312)
• azurerm_key_vault_managed_hardware_security_module -the tags property can now be updated (#24333)
• azurerm_logic_app_standard - support for the site_config.0.public_network_access_enabled property (#24257)
• azurerm_log_analytics_workspace_table - support for the plan property (#24341)
• azurerm_linux_web_app - support the value 20-lts for the node_version property (#24289)
• azurerm_recovery_services_vault - support creation with immutability set to locked (#23806)
• azurerm_spring_cloud_service - support for the sku_tier property (#24103)

BUG FIXES:

• Data Source: azurerm_role_definition - correctly export the role_definition_id attribute (#24320)
• azurerm_bot_service - fixing a bug where public_network_access_enabled was always set to true (#24255)
• azurerm_bot_service_azure_bot - tags can now be updated (#24332)
• azurerm_cosmosdb_account - fix validation for the ip_range_filter property (#24306)
• azurerm_linux_virtual_machine - the additional_capabilities.0.ultra_ssd_enabled can now be changed during the update (#24274)
• azurerm_logic_app_standard - update the default value of version from ~3 which is no longer supported to ~4 (#24134)
• azurerm_logic_app_standard - fix a crash when setting the default version 4.0 flag (#24322)
• azurerm_iothub_device_update_account - changing the sku property now creates a new resource (#24324)
• azurerm_iothub - prevent an inconsistant value after an apply (#24326)
• azurerm_orchestrated_virtual_machine_scale_set - correctly update the resource when hotpatch is enabled (#24335)
• azurerm_windows_virtual_machine - the additional_capabilities.0.ultra_ssd_enabled can now be changed during the update (#24274)
• azurerm_scheduled_query_rules_alert - changing the data_source_id now creates a new resource (#24327)
• azurerm_scheduled_query_rules_log - changing the data_source_id now creates a new resource (#24327)

3.85.0 (December 14, 2023)

FEATURES:

• New Data Source: azurerm_locations (#23324)

ENHANCEMENTS:

• provider: support for authenticating using Azure Kubernetes Service Workload Identity (#23965)
• dependencies: updating to v0.65.0 of github.com/hashicorp/go-azure-helpers (#24222)
• dependencies: updating to v0.20231214.1220802 of github.com/hashicorp/go-azure-sdk (#24246)
• dependencies: updating to version v0.20231214.1160726 of github.com/hashicorp/go-azure-sdk (#24241)
• dependencies: update security/automation to use hashicorp/go-azure-sdk (#24156)
• dependencies dataprotection: updating to API Version 2023-05-01 (#24143)
• kusto: removing the remnants of the old Resource ID Parsers now this uses hashicorp/go-azure-sdk (#24238)
• Data Source: azurerm_cognitive_account - export the identity block (#24214)
• Data Source: azurerm_monitor_workspace - add support for the default_data_collection_endpoint_id and default_data_collection_rule_id properties (#24153)
• Data Source: azurerm_shared_image_gallery - add support for the image_names property (#24176)
• azurerm_dns_txt_record - allow up to 4096 characters for the property record.value (#24169)
• azurerm_container_app - support for the workload_profile_name property (#24219)
• azurerm_container_app - suppot for the init_container block (#23955)
• azurerm_hpc_cache_blob_nfs_target - support for the verification_timer_in_seconds and write_back_timer_in_seconds properties (#24207)
• azurerm_hpc_cache_nfs_target - support for the verification_timer_in_seconds and write_back_timer_in_seconds properties (#24208)
• azurerm_linux_web_app - make client_secret_setting_name optional and conflict with client_secret_certificate_thumbprint (#21834)
• azurerm_linux_web_app_slot - make client_secret_setting_name optional and conflict with client_secret_certificate_thumbprint (#21834)
• azurerm_linux_web_app - fix a bug in app_settings where settings could be lost (#24221)
• azurerm_linux_web_app_slot - fix a bug in app_settings where settings could be lost (#24221)
• azurerm_log_analytics_workspace - add support for the immediate_data_purge_on_30_days_enabled property (#24015)
• azurerm_mssql_server - support for other identity types for the key vault key (#24236)
• azurerm_machine_learning_datastore_blobstorage - resource now skips validation when being created (#24078)
• azurerm_machine_learning_datastore_datalake_gen2 - resource now skips validation when being created (#24078)
• azurerm_machine_learning_datastore_fileshare - resource now skips validation when being created (#24078)
• azurerm_monitor_workspace - support for the default_data_collection_endpoint_id and default_data_collection_rule_id properties (#24153)
• azurerm_redis_cache - support for the storage_account_subscription_id property (#24101)
• azurerm_storage_blob - support for the source_content type Page (#24177)
• azurerm_web_application_firewall_policy - support new values to the rule_group_name property (#24194)
• azurerm_windows_web_app - make the client_secret_setting_name property optional and conflicts with the client_secret_certificate_thumbprint property (#21834)
• azurerm_windows_web_app_slot - make the client_secret_setting_name property optional and conflicts with the client_secret_certificate_thumbprint property (#21834)
• azurerm_windows_web_app - fix a bug in app_settings where settings could be lost (#24221)
• azurerm_windows_web_app_slot - fix a bug in app_settings where settings could be lost (#24221)
• azurerm_cognitive_account - add ContentSafety to the kind property validation (#24205)

BUG FIXES:

• provider: fix an authentication issue with Azure Storage when running in Azure China cloud (#24246)
• Data Source: azurerm_role_definition - fix bug where role_definition_id and scope were being incorrectly set (#24211)
• azurerm_batch_account - fix bug where UserAssigned, SystemAssigned could be passed to the resource even though it isn't supported (#24204)
• azurerm_batch_pool - fix bug where settings_json and protected_settings were not being unmarshaled (#24075)
• azurerm_bot_service_azure_bot - fix bug where public_network_access_enabled was being set as the value for LuisKey (#24164)
• azurerm_cognitive_account_customer_managed_key - identity_client_id is no longer passed to the api when it is empty (#24231)
• azurerm_linux_web_app_slot - error when service_plan_id is identical to the parent service_plan_id (#23403)
• azurerm_management_group_template_deployment - fixing a bug where template_spec_version_id couldn't be updated (#24072)
• azurerm_pim_active_role_assignment - fix an importing issue by filtering available role assignments based on the provided scope (#24077)
• azurerm_pim_eligible_role_assignment - fix an importing issue by filtering available role assignments based on the provided scope (#24077)
• azurerm_resource_group_template_deployment - fixing a bug where template_spec_version_id couldn't be updated (#24072)
• azurerm_security_center_setting - fix the casing for the setting_name Sentinel (#24210)
• azurerm_storage_account - Fix crash when checking for routingInputs.PublishInternetEndpoints and routingInputs.PublishMicrosoftEndpoints (#24228)
• azurerm_storage_share_file - prevent panic when the file specified by source is empty (#24179)
• azurerm_subscription_template_deployment - fixing a bug where template_spec_version_id couldn't be updated (#24072)
• azurerm_tenant_template_deployment - fixing a bug where template_spec_version_id couldn't be updated (#24072)
• azurerm_virtual_machine - prevent a panic by nil checking the first element of additional_capabilities (#24159)
• azurerm_windows_web_app_slot - error when service_plan_id is identical to the parent service_plan_id (#23403)

3.84.0 (December 07, 2023)

FEATURES:

• New Data Source: azurerm_storage_containers (#24061)
• New Resource: azurerm_elastic_san (#23619)
• New Resource: azurerm_key_vault_managed_hardware_security_module_role_assignment (#22332)
• New Resource: azurerm_key_vault_managed_hardware_security_module_role_definition (#22332)

ENHANCEMENTS:

• dependencies: updating mssql elasticpools from v5.0 to 2023-05-01-preview
• dependencies: updating to v0.20231207.1122031 of github.com/hashicorp/go-azure-sdk (#24149)
• Data Source: azurerm_storage_account - export the primary and secondary internet and microsoft hostnames for blobs, dfs, files, queues, tables and web (#23517)
• Data Source: azurerm_cosmosdb_account - export the connection_strings, primary_sql_connection_string, secondary_sql_connection_string, primary_readonly_sql_connection_string, secondary_readonly_sql_connection_string, primary_mongodb_connection_string, secondary_mongodb_connection_string, primary_readonly_mongodb_connection_string, and secondary_readonly_mongodb_connection_string attributes (#24129)
• azurerm_bot_service_azure_bot - support for the public_network_access_enabled property (#24125)
• azurerm_container_app_environment - support for the workload_profile property (#23478)
• azurerm_cosmosdb_cassandra_datacenter - support for the seed_node_ip_addresses property (#24076)
• azurerm_firewall - support for the dns_proxy_enabled property (#20519)
• azurerm_kubernetes_cluster - support for the support_plan property and the sku_tier Premium (#23970)
• azurerm_mssql_database - support for enclave_type field (#24054)
• azurerm_mssql_elasticpool - support for enclave_type field (#24054)
• azurerm_mssql_managed_instance - support for more vcores: 6, 10, 12, 20, 48, 56, 96, 128 (#24085)
• azurerm_redis_linked_server - support for the property geo_replicated_primary_host_name (#23984)
• azurerm_storage_account - expose the primary and secondary internet and microsoft hostnames for blobs, dfs, files, queues, tables and web (#23517)
• azurerm_synapse_role_assignment - support for the principal_type property (#24089)
• azurerm_spring_cloud_build_deployment - support for the application_performance_monitoring_ids property (#23969)
• azurerm_virtual_network_gateway - support for the bgp_route_translation_for_nat_enabled, dns_forwarding_enabled, ip_sec_replay_protection_enabled, remote_vnet_traffic_enabled, virtual_wan_traffic_enabled, radius_server, virtual_network_gateway_client_connection, policy_group, and ipsec_policy property (#23220)

BUG FIXES:

• azurerm_application_insights_api_key - prevent a bug where multiple keys couldn't be created for an Application Insights instance (#23463)
• azurerm_container_registry - the network_rule_set.virtual_network property has been deprecated (#24140)
• azurerm_hdinsight_hadoop_cluster - set roles.edge_node.install_script_action.parameters into state by retrieving the value provided in the user config since this property isn't returned by the API (#23971)
• azurerm_kubernetes_cluster - prevent a bug where maintenance window start date was always recalculated and sent to the API (#23985)
• azurerm_mssql_database - will no longer send all long retention values in payload unless set (#24124)
• azurerm_mssql_managed_database - will no longer send all long retention values in payload unless set (#24124)
• azurerm_mssql_server_microsoft_support_auditing_policy - only include storage endpoint in payload if set (#24122)
• azurerm_mobile_network_packet_core_control_plane - prevent a panic if the HTTP Response is nil (#24083)
• azurerm_storage_account - revert plan time name validation (#23799) (#24142)
• azurerm_web_application_firewall_policy - split create and update function to fix lifecycle - ignore changes (#23412)

3.83.0 (November 30, 2023)

UPGRADE NOTES:

• Key Vaults are now loaded using the ListBySubscription API within the Key Vault Resource Provider rather than the Resources API. This change means that the Provider now caches the list of Key Vaults available within a Subscription, rather than loading these piecemeal to workaround stale data returned from the Resources API (#24019)

FEATURES:

• New Data Source: azurerm_stack_hci_cluster (#24032)

ENHANCEMENTS:

• dependencies: updating to v0.20231129.1103252 of github.com/hashicorp/go-azure-sdk (#24063)
• automation: updating to API Version 2023-11-01 (#24017)
• keyvault: the cache is now populated using the ListBySubscription endpoint on the KeyVault Resource Provider rather than via the Resources API (#24019).
• keyvault: updating the cache to populate all Key Vaults available within the Subscription to reduce the number of API calls (#24019)
• Data Source azurerm_private_dns_zone: refactoring to use the ListBySubscription API rather than the Resources API when resource_group_name is omitted (#24024)
• azurerm_dashboard_grafana - support for grafana_major_version (#24014)
• azurerm_linux_web_app - add support for dotnet 8 (#23893)
• azurerm_linux_web_app_slot - add support for dotnet 8 (#23893)
• azurerm_media_transform - deprecate face_detector_preset and video_analyzer_preset (#24002)
• azurerm_postgresql_database - update the validation of collation to include Norwegian_Norway.1252 (#24070)
• azurerm_postgresql_flexible_server - updating to API Version 2023-06-01-preview (#24016)
• azurerm_redis_cache - support for the active_directory_authentication_enabled property (#23976)
• azurerm_windows_web_app - add support for dotnet 8 (#23893)
• azurerm_windows_web_app_slot - add support for dotnet 8 (#23893)
• azurerm_storage_account - add name validation in custom diff (#23799)

BUG FIXES:

• authentication: fix a bug where auxiliary tenants were not correctly authorized (#24063)
• azurerm_app_configuration - normalize location in replica block (#24074)
• azurerm_cosmosdb_account - cosmosdb version and capabilities can now be updated at the same time (#24029)
• azurerm_data_factory_flowlet_data_flow - source and sink properties are now optional (#23987)
• azurerm_datadog_monitor_tag_rule - correctly handle default rule (#22806)
• azurerm_ip_group: fixing a crash when firewall_ids and firewall_policy_ids weren't parsed correctly from the API Response (#24031)
• azurerm_nginx_deployment - add default value of 20 for capacity (#24033)

3.82.0 (November 23, 2023)

FEATURES:

• New Data Source: azurerm_monitor_workspace (#23928)
• New Resource: azurerm_application_load_balancer_subnet_association (#23628)

ENHANCEMENTS:

• dependencies: updating to v0.20231117.1130141 of github.com/hashicorp/go-azure-sdk (#23945)
• azurestackhci: updating to API Version 2023-08-01 (#23939)
• dashboard: updating to API Version 2023-09-01 (#23929)
• hpccache: updating to API version 2023-05-01 (#24005)
• mssql: updating resources using hashicorp/go-azure-sdk to API Version 2023-02-01-preview (#23721)
• templatespecversions: updating to API Version 2022-02-01 (#24007)
• Data Source: azurerm_template_spec_version - refactoring to use hashicorp/go-azure-sdk (#24007)
• azurerm_cosmosdb_postgresql_cluster - coordinator_storage_quota_in_mb and coordinator_vcore_count are no longer required for read replicas (#23928)
• azurerm_dashboard_grafana - sku can now be set to Essential (#23934)
• azurerm_gallery_application_version - add support for the config_file, package_file and target_region.exclude_from_latest properties (#23816)
• azurerm_hdinsight_hadoop_cluster - script_actions is no longer Force New (#23888)
• azurerm_hdinsight_hbase_cluster - script_actions is no longer Force New (#23888)
• azurerm_hdinsight_interactive_query_cluster - script_actions is no longer Force New (#23888)
• azurerm_hdinsight_kafka_cluster - script_actions is no longer Force New (#23888)
• azurerm_hdinsight_spark_cluster - script_actions is no longer Force New (#23888)
• azurerm_kubernetes_cluster - add support for the gpu_instance property (#23887)
• azurerm_kubernetes_cluster_node_pool - add support for the gpu_instance property (#23887)
• azurerm_log_analytics_workspace - add support for the identity property (#23864)
• azurerm_linux_function_app - add support for dotnet 8 (#23638)
• azurerm_linux_function_app_slot - add support for dotnet 8 (#23638)
• azurerm_managed_lustre_file_system - export attribute mgs_address (#23942)
• azurerm_mssql_database - support for Hyperscale SKUs (#23974)
• azurerm_mssql_database - refactoring to use hashicorp/go-azure-sdk (#23721)
• azurerm_mssql_server - refactoring to use hashicorp/go-azure-sdk (#23721)
• azurerm_shared_image - add support for trusted_launch_supported (#23781)
• azurerm_spring_cloud_container_deployment - add support for the application_performance_monitoring_ids property (#23862)
• azurerm_spring_cloud_customized_accelerator - add support for the accelerator_type and path properties (#23797)
• azurerm_point_to_site_vpn_gateway - allow multiple connection_configurations blocks (#23936)
• azurerm_private_dns_cname_record - ttl can now be set to 0 (#23918)
• azurerm_windows_function_app - add support for dotnet 8 (#23638)
• azurerm_windows_function_app_slot - add support for dotnet 8 (#23638)

BUG FIXES:

• azurerm_api_management - correct a bug with additional location zones within the additional_location block (#23943)
• azurerm_dev_test_linux_virtual_machine - storage_type is now ForceNew to match the updated API behaviour (#23973)
• azurerm_dev_test_windows_virtual_machine - storage_type is now ForceNew to match the updated API behaviour (#23973)
• azurerm_disk_encryption_set - resource will recreate if identity changes from SystemAssigned to UserAssigned (#23904)
• azurerm_eventhub_cluster: sku_name is no longer ForceNew (#24009)
• azurerm_firewall - recasing the value for firewall_policy_id to workaround the API returning the incorrect casing (#23993)
• azurerm_security_center_subscription_pricing - fix a bug preventing removal of extensions and downgrading tier to Free (#23821)
• azurerm_windows_web_app - fix an issue of incorrect application stack settings during update (#23372)

3.81.0 (November 16, 2023)

ENHANCEMENTS:

• dependencies: updating to v0.20231116.1162710 of github.com/hashicorp/go-azure-sdk (#23922)
• managedservices: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#23890)
• network: updating to API Version 2023-06-01 (#23875)
• servicelinker: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#23890)
• storage: refactoring usages of github.com/hashicorp/go-azure-sdk to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#23890)
• Data Source: azurerm_network_ddos_protection_plan: refactoring to use hashicorp/go-azure-sdk (#23849)
• azurerm_linux_function_app - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_linux_function_app_slot - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_linux_web_app - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_linux_web_app_slot - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_logic_app_integration_account_certificate - name now accepts underscores (#23866)
• azurerm_logic_app_integration_account_partner - business_identity.value now accepts underscores (#23866)
• azurerm_monitor_data_collection_rule - added support for WorkspaceTransforms as kind (#23873)
• azurerm_network_ddos_protection_plan: refactoring to use hashicorp/go-azure-sdk (#23849)
• azurerm_windows_function_app - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_windows_function_app_slot - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_windows_web_app - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)
• azurerm_windows_web_app_slot - add support for disabling Basic Auth for default Publishing Profile via new properties ftp_publish_basic_authentication_enabled and webdeploy_publish_basic_authentication_enabled (#23900)

3.80.0 (November 09, 2023)

ENHANCEMENTS:

• internal/sdk - Added support for pointer Types in resource models (#23810)
• dependencies: updating to v0.63.0 of github.com/hashicorp/go-azure-helpers (#23785)
• dependencies: updating to v0.20231106.1151347 of github.com/hashicorp/go-azure-sdk (#23787)
• azurerm_cognitive_deployment - support for the version_upgrade_option property (#22520)
• azurerm_firewall_policy_rule_collection_group - add support for the property http_headers (#23641)
• azurerm_kubernetes_cluster - fips_enabled can be updated in the default_node_pool without recreating the cluster (#23612)
• azurerm_kusto_cluster - the cluster name can now include dashes (#23790)
• azurerm_postgresql_database - update the validation of collation to include support for French_France.1252 (#23783)

BUG FIXES:

• Data Source: azurerm_data_protection_backup_vault - removing import support, since Data Sources don't support being imported (#23820)
• Data Source: azurerm_kusto_database - removing import support, since Data Sources don't support being imported (#23820)
• Data Source: azurerm_virtual_hub_route_table - removing import support, since Data Sources don't support being imported (#23820)
• azurerm_windows_web_app - prevent a panic with the auto_heal.actions property (#23836)
• azurerm_windows_web_app - prevent a panic with the auto_heal.triggers property (#23812)

3.79.0 (November 02, 2023)

ENHANCEMENTS:

• provider: log instead of error when RPs are unavailable when validating RP registrations (#23380)
• azurerm_arc_kuberenetes_cluster_extension_resource - the version and release_train properties can now be set simultaneously (#23692)
• azurerm_container_apps - support for the ingress.exposed_port property (#23752)
• azurerm_cosmosdb_postgresql_cluster - read replica clusters can be created without specifying administrator_login_password property (#23750)
• azurerm_managed_application - arrays can be supplied in the parameter_values property (#23754)
• azurerm_storage_management_policy - support for properties rule.*.actions.*.base_blob.0.tier_to_cold_after_days_since_{modification|last_access_time|creation}_greater_than and rule.*.actions.*.{snapshot|version}.0.tier_to_cold_after_days_since_creation_greater_than (#23574)

BUG FIXES:

• azurerm_api_management_diagnostic - the operation_name_format attribute will only be sent if identifier is set to applicationinsights (#23736)
• azurerm_backup_policy_vm - fix payload by using current datetime (#23586)
• azurerm_kubernetes_cluster - the custom_ca_trust_certificates_base64 property can not be removed, only updated (#23737)

3.78.0 (October 26, 2023)

FEATURES:

• New Resource: azurerm_resource_management_private_link_association (#23546)

ENHANCEMENTS:

• dependencies: updating to v0.20231025.1113325 of github.com/hashicorp/go-azure-sdk (#23684)
• dependencies: updating to v1.58.3 of google.golang.org/grpc (#23691)
• dependencies: updating search service from 2022-09-01 to 2023-11-01 (#23698)
• Data Source: azurerm_monitor_workspace - export query_endpoint (#23629)
• azurerm_express_route_port - support for macsec_sci_enabled (#23625)
• azurerm_eventhub_namespace_customer_managed_key - support for the user_assigned_identity_id property (#23635)
• azurerm_postgresql_flexible_server - private_dns_zone_id is no longer ForceNew and case is suppressed (#23660)
• azurerm_synapse_workspace - add support for azuread_authentication_only (#23659)
• azurerm_redis_enterprise_cluster - support for new location Japan East (#23696)
• azurerm_search_service - support for semantic_search_sku field (#23698)

BUG FIXES:

• azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - added lock for ruleStackID (#23601)
• azurerm_cognitive_deployment - remove forceNew tag from rai_policy_name (#23697)

3.77.0 (October 19, 2023)

FEATURES:

• New Resources: azurerm_application_load_balancer_frontend (#23411)
• New Resources: azurerm_dev_center (#23538)
• New Resources: azurerm_dev_center_project (#23538)

ENHANCEMENTS:

• dependencies: updating to v0.62.0 of github.com/hashicorp/go-azure-helpers (#23581)
• dependencies: updating Kusto SDK from 2023-05-02 to 2023-08-15 (#23598)
• dependencies: updating nginx from 2022-08-01 to 2023-04-01 (#23583)
• netapp: updating to use API Version 2023-05-01 (#23576)
• springcloud: updating to use API Version 2023-09-01-preview (#23544)
• storage: updating to use API Version 2023-01-01 (#23543)
• internal/sdk: fixing an issue where struct fields containing removedInNextMajorVersion wouldn't be decoded correctly (#23564)
• internal/sdk: struct tag parsing is now handled consistently during both encoding and decoding (#23568)
• provider: the roll_instances_when_required provider feature in the virtual_machine_scale_set block is now optional (#22976)
• Data Source: azurerm_automation_account: refactoring the remaining usage of Azure/azure-sdk-for-go to use hashicorp/go-azure-sdk (#23555)
• azurerm_automation_account: refactoring the remaining usage of Azure/azure-sdk-for-go to use hashicorp/go-azure-sdk (#23555)
• azurerm_resource_deployment_script_azure_cli - improve validation for the version property to support newer versions (#23370)
• azurerm_resource_deployment_script_azure_power_shell - improve validation for the version property to support newer versions (#23370)
• azurerm_nginx_deployment - support for the capacity and email properties (#23596)

BUG FIXES:

• Data Source: azurerm_virtual_hub_connection - export the inbound_route_map_id, outbound_route_map_id, and static_vnet_local_route_override_criteria attributes in the routing block, and fix a bug where these attributes could not be set (#23491)
• azurerm_cdn_frontdoor_rule - the url_filename_condition properties match_values is now optional if operator is set to Any (#23541)
• azurerm_shared_image_gallery - added the Private and Groups options for the sharing.permission property (#23570)
• azurerm_redis_cache - fixed incorrect ssl values for redis_primary_connection_string and secondary_connection_string (#23575)
• azurerm_monitor_activity_log_alert - the recommend_category property now can be set to HighAvailability (#23605)
• azurerm_recovery_services_vault - the encryption property can now be used with the cross_region_restore_enabled property (#23618)
• azurerm_storage_account_customer_managed_key - prevent a panic when the keyvault id is empty (#23599)

3.76.0 (October 12, 2023)

FEATURES:

• New Resource: azurerm_security_center_storage_defender (#23242)
• New Resource: azurerm_spring_cloud_application_insights_application_performance_monitoring (#23107)

ENHANCEMENTS:

• provider: updating to build using Go 1.21.3 (#23514)
• dependencies: updating to v0.20231012.1141427 of github.com/hashicorp/go-azure-sdk (#23534)
• Data Source: azurerm_application_gateway - support for backend_http_settings, global, gateway_ip_configuration and additional attributes (#23318)
• Data Source: azurerm_network_service_tags - export the name attribute (#23382)
• azurerm_cosmosdb_postgresql_cluster - add support for sql_version of 16 and citus_version of 12.1 (#23476)
• azurerm_palo_alto_local_rulestack - correctly normalize the location property (#23483)
• azurerm_static_site - add support for app_settings (#23421)

BUG FIXES:

• azurerm_automation_schedule - fix a bug when updating start_time (#23494)
• azurerm_eventhub - remove ForceNew and check partition_count is not decreased (#23499)
• azurerm_managed_lustre_file_system - update validation for storage_capacity_in_tb according to sku_name in use (#23428)
• azurerm_virtual_machine - fix a crash when the API response for the os_profile block contains nil properties (#23535)

3.75.0 (September 28, 2023)

FEATURES:

• New Resource: azurerm_application_load_balancer (#22517)
• New Resource: azurerm_resource_management_private_link (#23098)

ENHANCEMENTS:

• dependencies: firewall migrated to hashicorp/go-azure-sdk (#22863)
• azurerm_bot_service_azure_bot - add support for the icon_url property (#23114)
• azurerm_cognitive_deployment - capacity property is now updateable (#23251)
• azurerm_container_group - added support for key_vault_user_identity_id (#23332)
• azurerm_data_factory - added support for the publish_enabled property (#2334)
• azurerm_firewall_policy_rule_collection_group - add support for the description property (#23354)
• azurerm_kubernetes_cluster - network_profile.network_policy can be migrated to cilium (#23342)
• azurerm_log_analytics_workspace - add support for the data_collection_rule_id property (#23347)
• azurerm_mysql_flexible_server - add support for the io_scaling_enabled property (#23329)

BUG FIXES:

• azurerm_api_management_api - fix importing openapi format content file issue (#23348)
• azurerm_cdn_frontdoor_rule - allow a cache_duration of 00:00:00 (#23384)
• azurerm_cosmosdb_cassandra_datacenter - sku_name is now updatable (#23419)
• azurerm_key_vault_certificate - fix a bug that prevented soft-deleted certificates from being recovered (#23204)
• azurerm_log_analytics_solution - fix create and update lifecycle of resource by splitting methods (#23333)
• azurerm_management_group_subscription_association - mark resource as gone correctly if not found when retrieving (#23335)
• azurerm_management_lock - add polling after create and delete to check for RP propagation (#23345)
• azurerm_monitor_diagnostic_setting - added validation to ensure at least one of category or category_group is supplied (#23308)
• azurerm_palo_alto_local_rulestack_prefix_list - fix rulestack not being committed on delete (#23362)
• azurerm_palo_alto_local_rulestack_fqdn_list - fix rulestack not being committed on delete (#23362)
• security_center_subscription_pricing_resource - disabled extensions logic now works as expected (#22997)

3.74.0 (September 21, 2023)

NOTES:

• azurerm_synapse_sql_pool - users that have imported azurerm_synapse_sql_pool resources that were created outside of Terraform using an LRS storage account type will need to use ignore_changes to avoid the resource from being destroyed and recreated.

FEATURES:

• New Resource: azurerm_arc_resource_bridge_appliance (#23108)
• New Resource: azurerm_data_factory_dataset_azure_sql_table (#23264)
• New Resource: azurerm_function_app_connection (#23127)

ENHANCEMENTS:

• dependencies: updating to v0.20230918.1115907 of github.com/hashicorp/go-azure-sdk (#23337)
• dependencies: downgrading to v1.12.5 of github.com/rickb777/date (#23296)
• mysql: updating to use API Version 2022-01-01 (#23320)
• azurerm_app_configuration - support for the replica block (#22452)
• azurerm_bot_channel_directline - support for user_upload_enabled, endpoint_parameters_enabled, and storage_enabled (#23149)
• azurerm_container_app - support for scale rules (#23294)
• azurerm_container_app_environment - support for zone redundancy (#23313)
• azurerm_container_group - support for the key_vault_user_identity_id property for Customer Managed Keys (#23332)
• azurerm_cosmosdb_account - support for MongoDB connection strings (#23331)
• azurerm_data_factory_dataset_delimited_text - support for the dynamic_file_system_enabled, dynamic_path_enabled, and dynamic_filename_enabled properties (#23261)
• azurerm_data_factory_dataset_parquet - support for the azure_blob_fs_location block (#23261)
• azurerm_monitor_diagnostic_setting - validation to ensure either category or category_group are supplied in enabled_log and log blocks (#23308)
• azurerm_network_interface - support for the auxiliary_mode and auxiliary_sku properties (#22979)
• azurerm_postgresql_flexible_server - increased the maximum supported value for storage_mb (#23277)
• azurerm_shared_image_version - support for the replicated_region_deletion_enabled and target_region.exclude_from_latest_enabled properties (#23147)
• azurerm_storage_account - support for setting domain_name and domain_guid for AADKERB (#22833)
• azurerm_storage_account_customer_managed_key - support for cross-tenant customer-managed keys with the federated_identity_client_id, and key_vault_uri properties (#20356)
• azurerm_web_application_firewall_policy - support for the rate_limit_duration, rate_limit_threshold, group_rate_limit_by, and request_body_inspect_limit_in_kb properties (#23239)

BUG FIXES:

• Data Source: azurerm_container_app_environment: fix log_analytics_workspace_name output to correct value (#23298)
• azurerm_api_management_api - set the service_url property when importing the resource (#23011)
• azurerm_app_configuration - prevent crash by nil checking the encryption configuration (#23302)
• azurerm_app_configuration_feature - update percentage_filter_value to accept correct type of float (#23263)
• azurerm_container_app - fix an issue with commands and args being overwritten when using multiple containers (#23338)
• azurerm_key_vault_certificate - fix issue where certificates couldn't be recovered anymore (#23204)
• azurerm_key_vault_key - the ForceNew when expiration_date is removed from the config file (#23327)
• azurerm_linux_function_app - fix a bug in setting the storage settings when using Elastic Premium plans (#21212)
• azurerm_linux_web_app - fix docker app stack update (#23303)
• azurerm_linux_web_app - fix crash in auto heal expansion (#21328)
• azurerm_linux_web_app_slot - fix docker app stack update (#23303)
• azurerm_linux_web_app_slot - fix crash in auto heal expansion (#21328)
• azurerm_log_analytics_solution - fix bug where the resource wasn't handling successful creation on subsequent applies (#23312)
• azurerm_management_group_subscription_association - fix bug to correctly mark resource as gone if not found during read (#23335)
• azurerm_mssql_elasticpool - remove check that prevents license_type from being set for certain skus (#23262)
• azurerm_servicebus_queue - fixing an issue where auto_delete_on_idle couldn't be set to P10675199DT2H48M5.4775807S (#23296)
• azurerm_servicebus_topic - fixing an issue where auto_delete_on_idle couldn't be set to P10675199DT2H48M5.4775807S (#23296)
• azurerm_storage_account - prevent sending unsupported blob properties in payload for Storage account kind (#23288)
• azurerm_synapse_sql_pool - expose storage_account_type (#23217)
• azurerm_windows_function_app - fix a bug in setting the storage settings when using Elastic Premium plans (#21212)
• azurerm_windows_web_app - fix docker app stack update (#23303)
• azurerm_windows_web_app_slot - fix docker app stack update (#23303)

DEPRECATIONS:

• azurerm_application_gateway - deprecate Standard and WAF skus (#23310)
• azurerm_bot_channel_web_chat - deprecate site_names in favour of site block (#23161)
• azurerm_monitor_diagnostic_setting - deprecate retention_policy in favour of azurerm_storage_management_policy (#23260)

3.73.0 (September 14, 2023)

FEATURES:

• New Resource: azurerm_iothub_endpoint_cosmosdb_account (#23065)
• New Resource: azurerm_virtual_hub_routing_intent (#23138)

ENHANCEMENTS:

• dependencies: updating to v0.1.1 of github.com/btubbs/datetime (#23221)
• dependencies: updating to v1.3.1 of github.com/google/uuid (#23221)
• dependencies: updating to v0.61.0 of github.com/hashicorp/go-azure-helpers (#23249)
• dependencies: updating to v0.20230907.1113401 of github.com/hashicorp/go-azure-sdk (#23221)
• dependencies: updating to v1.5.0 of github.com/hashicorp/go-hclog (#23221)
• dependencies: updating to v2.29.0 of github.com/hashicorp/terraform-plugin-sdk/v2 (#23221)
• dependencies: updating to v1.5.1 of github.com/hashicorp/terraform-plugin-testing (#23221)
• dependencies: updating to v1.20.2 of github.com/rickb777/date (#23221)
• dependencies: updating to v0.13.0 of golang.org/x/crypto (#23221)
• dependencies: updating to v0.15.0 of golang.org/x/net (#23221)
• dependencies: updating to v0.13.0 of golang.org/x/tools (#23221)
• azurerm_bot_channel_ms_teams - support for deployment_environment (#23122)
• azurerm_managed_disk - updating to use API Version 2023-04-02 (#23233)
• azurerm_managed_disk - support for optimized_frequent_attach_enabled (#23241)
• azurerm_managed_disk - support for performance_plus_enabled (#23241)
• azurerm_maps_account - support for local_authentication_enabled (#23216)
• azurerm_mssql_elasticpool - support for configuring license_type when using the Hyperscale sku (#23256)
• azurerm_security_center_assessment_policy - refactoring to use hashicorp/go-azure-sdk (#23158)

BUG FIXES:

• azurerm_api_management - split create and update methods (#23259)
• azurerm_api_management_backend - fixing a panic when flattening the credentials block (#23219)
• azurerm_key_vault_certificate - fixing a regression where certificates from a custom/unknown issuer would be polled indefinitely (#23214)
• azurerm_redis_cache - prevent sending redis_configuration.aof_backup_enabled when the sku is not Premium to avoid API error (#22774)
• azurerm_web_application_firewall_policy - capture and toggle state of custom_rule blocks with an enabled field (#23163)

3.72.0 (September 07, 2023)

FEATURES:

• Provider Feature: subscription cancellation on destroy can now be disabled via the provider features block (#19936)
• New Data Source: netapp_volume_quota_rule (#23042)
• New Resource: azurerm_automation_python3_package (#23087)
• New Resource: netapp_volume_quota_rule (#23042)

ENHANCEMENTS:

• dependencies: updating to v0.20230906.1160501 of github.com/hashicorp/go-azure-sdk (#23191)
• containerapps: updating to API Version 2023-05-01 (#22804)
• keyvault: upgrade remaining resources to 2023-02-01 (#23089)
• redisenterprise: updating to API Version 2023-07-01 (#23178)
• vpngateway: updating to use hashicorp/go-azure-sdk (#22906)
• internal/sdk: typed resources using a custom importer now get a timed context (#23160)
• azurerm_batch_pool - support for accelerated_networking_enabled (#23021)
• azurerm_batch_pool - support for automatic_upgrade_enabled (#23021)
• azurerm_bot_channel_direct_line_speech - support for the cognitive_account_id property (#23106)
• azurerm_bot_service_azure_bot - support for the local_authentication_enabled property (#23096)
• azurerm_container_app_environment - support for the dapr_application_insights_connection_string (#23080)
• azurerm_cosmosdb_cassandra_datacenter - refactoring to use hashicorp/go-azure-sdk (#23110)
• azurerm_cosmosdb_cassandra_datacenter - updating to API Version 2023-04-15 (#23110)
• azurerm_kubernetes_cluster - Azure CNI can be updated to use overlay (#22709)
• azurerm_monitor_diagnostic_setting - deprecating retention_policy within enabled_log (#23029)
• azurerm_mssql_database - split create and update methods (#23209)
• azurerm_postgresql_database - collation can now be set to English_United Kingdom.1252 (#23171)
• azurerm_postgresql_flexible_database - collation can now be set to English_United Kingdom.1252 (#23171)
• azurerm_postgresql_flexible_server - support for the auto_grow_enabled property (#23069)
• azurerm_redis_enterprise_cluster - support for Flash clusters in Brazil South (#23200)
• azurerm_resource_provider_registration - refactoring to use hashicorp/go-azure-sdk (#23072)
• azurerm_virtual_machine_extension - support for provision_after_extensions (#23124)
• azurerm_virtual_network_gateway - increasing the default timeout for create to 90m (#23003)
• azurerm_virtual_hub_connection - support for inbound_route_map_id, outbound_route_map_id, and static_vnet_local_route_override_criteria properties (#23049)

BUG FIXES:

• azurerm_api_management_api_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_api_management_api_operation_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_api_management_product_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_automation_account - fixes logic for local_authentication_enabled (#23082)
• azurerm_key_vault_managed_storage_account - check id can be parsed correctly before setting it in state (#23022)
• azurerm_monitor_diagnostic_setting - fix enabled_log feature flagged schema (#23093)
• azurerm_pim_active_role_assignment: polling for the duration of the timeout, rather than a fixed 5 minute value (#22932)
• azurerm_policy_set_definition - only sending parameters when a value is configured (#23155)
• azurerm_synapse_workspace - fixes index out-of-range panic when parsing storage_data_lake_gen2_filesystem_id (#23019)
• machine_learning_datastore_* - fixes container ids (#23140)
• azurerm_key_vault_certificate - id now points to new version when certificate is updated (#23135)
• azurerm_site_recovery_replicated_vm - update network_interface diff so replicated items now can be updated (#23199)

DEPRECATION:

• Data Source: azure_monitor_log_profile - Azure is retiring Azure Log Profiles on the 30th of September 2026 (#23146)
• azure_monitor_log_profile - Azure is retiring Azure Log Profiles on the 30th of September 2026 (#23146)

3.71.0 (August 24, 2023)

BREAKING CHANGES:

• App Service win32_status property - Due to a change made in the service to the underlying type of the Auto Heal property win32_status combined with a prior bug (in v3.62.1 and earlier) causing the value of this property to be stored incorrectly in state as an empty string, the value of this property could not be updated or state migrated to accommodate the necessary type change in the state. This results in the resources named above returning an error of a number is needed when decoding the state for this value. Unfortunately, this is a breaking change and will require users of this field to change their Terraform Configuration. The field win32_status has been replaced by win32_status_code (this remains an int, as in 3.63.0 onwards) for azurerm_linux_web_app, azurerm_linux_web_app_slot, azurerm_windows_web_app, azurerm_windows_web_app_slot resources. (#23075)

FEATURES:

• New Resource: azurerm_databricks_workspace_root_dbfs_customer_managed_key (#22579)

ENHANCEMENTS:

• dependencies: updating to v0.20230824.1130652 of github.com/hashicorp/go-azure-sdk (#23076)
• trafficmanager: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22579)
• webpubsub: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22579)
• automation: upgrade remaining resources to 2022-08-08 (#22989)
• azurerm_storage_management_policy - move to hashicorp/go-azure-sdk (#23035)
• Data Source: azurerm_disk_encryption_set - support for the identity block (#23005)
• azurerm_container_group - support for the sku and (init_)container.*.security properties (#23034)
• azurerm_kubernetes_cluster - extend allowed ranges for various sysctl_config attribute ranges (#23077)
• azurerm_kubernetes_cluster_node_pool - extend allowed ranges for various sysctl_config attribute ranges (#23077)
• azurerm_kubernetes_cluster - clusters can be updated to use the cilium dataplane by setting the value in ebpf_data_plane (#22952)
• azurerm_linux_virtual_machine_scale_set - cancel rolling upgrades that are in progress before destroying the resource (#22991)
• azurerm_servicebus_namespace - support for network_rule_set block (#23057)
• azurerm_windows_virtual_machine_scale_set - cancel rolling upgrades that are in progress before destroying the resource (#22991)
• azurerm_synapse_spark_pool - support addtional values for the node_size_family property (#23040)

BUG FIXES:

• azurerm_api_management_policy - fixes an error caused by a migration (#23018)
• azurerm_kubernetes_cluster - deprecate public_network_access_enabled and prevent sending it to the API since it isn't functional (#22478)

3.70.0 (August 17, 2023)

FEATURES:

• New Resource: azurerm_mssql_virtual_machine_availability_group_listener (#22808)
• New Resource: azurerm_mssql_virtual_machine_group (#22808)

ENHANCEMENTS:

• dependencies: updating to v0.20230815.1165905 of github.com/hashicorp/go-azure-sdk (#22981)
• apimanagement: updating to use hashicorp/go-azure-sdk (#22783)
• cosmos: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• devtestlabs: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22981)
• policy: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• postgresql: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• recoveryservices: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• resources: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• storage: updating Storage Account and Storage Blob Container to use Common IDs to enable migrating to hashicorp/go-azure-sdk in the future (#22915)
• Data Source: azurerm_kubernetes_cluster - add support for the current_kubernetes_version property (#22986)
• azurerm_mssql_virtual_machine - add support for the sql_virtual_machine_group_id and wsfc_domain_credential properties (#22808)
• azurerm_netapp_pool - size_in_tb can be sized down to 2 TB (#22943)
• azurerm_stack_hci_cluster - add support for the automanage_configuration_id property (#22857)
• Data Source: azurerm_disk_encryption_set - now exports key_vault_key_url (#22893)
• azurerm_disk_encryption_set - now exports key_vault_key_url (#22893)

BUG FIXES:

• azurerm_cognitive_deployment - add lock on parent resource to prevent errors when deleting the resource (#22940)
• azurerm_cost_management_scheduled_action - fix update for email_address_sender (#22930)
• azurerm_disk_encryption_set - now correctly supports key rotation by specifying a versionless Key ID when setting auto_key_rotation_enabled to true (#22893)
• azurerm_iothub_dps - updating the validation for target within the ip_filter_rule block to match the values defined in the Azure API Definitions (#22891)
• azurerm_postgresql_database - reworking the validation for database collation (#22928)
• azurerm_postgresql_flexible_database - reworking the validation for database collation (#22928)
• azurerm_storage_management_policy - check for an existing resource to prevent overwriting property values (#22966)
• azurerm_virtual_network_gateway_connection - custom_bgp_addresses.secondary is now Optional rather than Required (#22912)
• azurerm_web_application_firewall_policy - fix handling not found in read (#22982)

---

For information on changes between the v3.69.0 and v3.0.0 releases, please see the previous v3.x changelog entries.

For information on changes between the v2.99.0 and v2.0.0 releases, please see the previous v2.x changelog entries.

For information on changes between the v1.44.0 and v1.0.0 releases, please see the previous v1.x changelog entries.

For information on changes prior to the v1.0.0 release, please see the v0.x changelog.