v4.17.0

FEATURES:

• New Data Source: azurerm_api_management_subscription (#27824)
• New Resource: azurerm_cognitive_account_rai_policy (#28013)
• New Resource: azurerm_mssql_job_target_group (#28492)

ENHANCEMENTS:

• dependencies: network - update to use 2024-05-01 (#28146)
• dependencies: privatedns - update to use 2024-06-01 (#28599)
• dependencies: storage - update to use 2023-05-01 (#27760)
• Data Source: azure_communication_service - add support for the hostname property (#28620)
• azurerm_api_management - capacity now has a max limit of 50 (#28648)
• azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#27950)
• azurerm_cognitive_account - support for the bypass property (#28221)
• azure_communication_service - add support for the hostname property (#28620)
• azurerm_container_app_environment - add support for Azure Monitor as a log destination (#26047)
• azurerm_mssql_elasticpool- add support for MOPRMS pool type and update validation for PRMS and Gen5 pool types (#28453)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#28480)
• azurerm_stream_analytics_output_cosmosdb - support for the authentication_mode property (#28372)
• azurerm_stream_analytics_stream_input_blob - add support for authentication_mode (#27853)

BUG FIXES:

• azurerm_container_app - update the validation regex for the resource's name (#28528)
• azurerm_kubernetes_cluster - parse oms_agent.log_analytics_workspace_id insensitively to handle inconsistent casing (#28575)
• azurerm_kubernetes_flux_configuration - fix issue where removing post_build from a kustomization resulted in an error from the API (#28590)
• azurerm_linux_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_log_analytics_storage_insights - use subscription from workspace ID when building the resource ID (#28469)
• azurerm_orchestrated_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_virtual_machine - parse os_disk insensitively to handle inconsistent casing (#28592)
• azurerm_windows_virtual_machine_scale_set - Prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)

v4.16.0

NOTE: This release contains a breaking change reverting redisenterprise API version from 2024-10-01 to 2024-06-01-preview as not all regions are currently supported in the 2024-10-01 version

BREAKING CHANGES:

• dependencies - redisenterprise API version reverted from 2024-10-01 to 2024-06-01-preview (#28516)

FEATURES:

• New Resource: azurerm_container_registry_credential_set (#27528)
• New Resource: azurerm_mssql_job (#28456)
• New Resource: azurerm_mssql_job_schedule (#28456)

ENHANCEMENTS:

• dependencies - update hashicorp/go-azure-sdk to v0.20250115.1141151 (#28519)
• dependencies - costmanagement update to use 2023-08-01 (#27680)
• dependencies - postgresql update API version to 2024-08-01 (#28474)
• azurerm_container_app – support for the termination_grace_period_seconds property (#28307)
• azurerm_cost_anomaly_alert - add support for the notification_email property (#27680)
• azurerm_data_protection_backup_vault - support for immutability property (#27859)
• azurerm_databricks_workspace - fix ignore_changes support (#28527)
• azurerm_kubernetes_cluster_node_pool - add support for the temporary_name_for_rotation property to allow node pool rotation (#27791)
• azurerm_linux_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_linux_web_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_windows_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)

BUG FIXES:

• azurerm_logic_app_standard - fix setting public_network_access for conflicting API properties (#28465)
• azurerm_redis_cache - data_persistence_authentication_method can now be unset (#27932)
• azurerm_mssql_database - fix bug where verifying TDE might fail to return an error on failure (#28505)
• azurerm_mssql_database - fix several potential bugs where retry functions could return false negatives for actual errors (#28505)
• azurerm_private_endpoint - fix a bug where reading Private DNS could error and exit the Read of the resource early without raising an error (#28505)

v4.15.0

FEATURES:

• New Data Source: azurerm_kubernetes_fleet_manager (#28278)
• New Resource: azurerm_arc_kubernetes_provisioned_cluster (#28216)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#27874)
• New Resource azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#27931)
• New Resource azurerm_dynatrace_tag_rules (#27985)

ENHANCEMENTS:

• dependencies - update tool Go version and bump go-git version to 5.13.0 (#28425)
• dependencies - update hashicorp/go-azure-sdk to v0.20241212.1154051 (#28360)
• dependencies - frontdoor - partial update to use 2024-02-01 API (#28233)
• dependencies - postgresql - update to 2024-08-01 (#28380)
• dependencies - redisenterprise - update to 2024-10-01 and support for new skus (#28280)
• Data Source: azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• Data Source: azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• Data Source: azurerm_static_web_app - add support for the repository_url and repository_branch properties (#27401)
• azurerm_billing_account_cost_management_export - add support for the file_format property (#27122)
• azurerm_cdn_frontdoor_profile - add support for the identity property (#28281)
• azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#28404)
• azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#28442)
• azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#25695)
• azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_netapp_volume - make the network_features property Optional/Computed (#28390)
• azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• azurerm_resource_group_cost_management_export - add support for the file_format property (#27122)
• azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#28398)
• azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#27401)
• azurerm_subscription_cost_management_export - add support for the file_format property (#27122)
• azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#27830)
• azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#24801)

BUG FIXES:

• azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#28427)
• azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#28312)
• azurerm_batch_pool - support for new block security_profile (#28069)
• azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#27876)
• azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#28215)
• azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#28269)
• azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#28319)
• azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#28279)

v4.14.0

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#28043)
• New Resource: azurerm_fabric_capacity (#28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#28211)
• nginx - update api version to 2024-11-01-preview (#28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#28228)

v4.13.0

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#28105)

v4.12.0

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#28137)
• containerapps - update api version to 2024-03-01 (#28074)
• Search - update api version to 2024-06-01-preview (#27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#28114)

v4.11.0

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#28083)
• New Resource: azurerm_eventgrid_namespace (#27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#28075)
• batch - upgrade api version to 2024-07-01 (#27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#28039)
• azurerm_arc_machine - add support for the identity and tags properties (#27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#28039)

BUG:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#27828)

v4.10.0

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#27827)
• New Resource: azurerm_netapp_backup_vault (#27188)
• New Resource: azurerm_netapp_backup_policy (#27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#27909)
• azurerm_application_gateway - support more values for the status_code property (#27535)
• azurerm_bastion_host - support for the zones property (#27909)
• azurerm_communication_service - support for usgov region (#27919)
• azurerm_email_communication_service - support for usgov region added (#27919)
• azurerm_linux_function_app - support for .NET 9 (#27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#27879)
• azurerm_linux_web_app - support for .NET 9 (#27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_web_app - support for .NET 9 (#27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_function_app - support for .NET 9 (#27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#27966)

v4.9.0

FEATURES:

• New Resource: azurerm_dynatrace_monitor (#27432)
• New Resource: azurerm_dashboard_grafana_managed_private_endpoint (#27781)
• New Resource: azurerm_data_protection_backup_instance_mysql_flexible_server (#27464)
• New Resource: azurerm_mongo_cluster (#27636)
• New Resource: azurerm_stack_hci_network_interface (#26888)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241104.1140654 (#27896)
• dependencies - update go-azure-helpers to v0.71.0 (#27897)
• dependencies - update golang-jwt to v4.5.1 (#27938)
• storage - allow azurerm_storage_account to be used in Data Plane restrictive environments (#27818)
• azurerm_cognitive_deployment - sku.0.name now supports DataZoneStandard (#27926)
• azurerm_mssql_managed_database - support for the tags property (#27857)
• azurerm_oracle_cloud_vm_cluster - support for the domain, scan_listener_port_tcp, scan_listener_port_tcp_ssl and zone_id properties (#27808)
• azurerm_public_ip_prefix - support for the sku_tier property (#27882)
• azurerm_public_ip - support for the domain_name_label_scope property (#27748)
• azurerm_subnet - default_outbound_access_enabled can now be updated (#27858)
• azurerm_storage_container - support for the storage_account_id property (#27733)
• azurerm_storage_share - support for the storage_account_id property (#27733)

v3.117.0

SPECIAL NOTES: This 3.x release is a special, one-off, back-port of functionality for azurerm_storage_account to enable users to deploy this resource in environments which block / are restrictive of Data Plane access, thus preventing the resource being created and/or managed. This functionality is back-ported from the v4.9.0 release. Users migrating from this release to the 4.x line, should upgrade directly to v4.9.0 or later, as these features are not compatible with earlier releases of 4.x.

FEATURES:

• New Resource: azurerm_storage_account_queue_properties (#27819)
• New Resource: azurerm_storage_account_static_website (#27819)
• New Provider Feature - storage data_plane_available feature flag (#27819)

ENHANCEMENTS:

• azurerm_storage_account - can now be created and managed if Data Plane endpoints are blocked by a firewall (#27819)