CHANGELOG.md

3.54.0 (April 27, 2023)

BREAKING CHANGES:

• azurerm_attestation_provider - the field policy is deprecated and non-functional due to a design issue with the original resource (where this wasn't retrieved from the Azure API and thus wasn't exposed correctly) - this has been superseded by the fields open_enclave_policy_base64, sgx_enclave_policy_base64 and tpm_policy_base64. (#21524)

FEATURES:

• New Resource: azurerm_arc_kubernetes_cluster_extension (#21310)
• New Resource: azurerm_cosmosdb_postgresql_cluster (#21090)
• New Resource: azurerm_email_communication_service (#21526)
• New Resource: azurerm_kubernetes_cluster_extension (#21310)
• New Resource: azurerm_netapp_volume_group_sap_hana (#21290)
• New Resource: azurerm_storage_mover_project (#21477)
• New Resource: azurerm_storage_mover_job_definition (#21514)

ENHANCEMENTS:

• dependencies: updating to v0.20230427.1112058 of github.com/hashicorp/go-azure-sdk (#21583)
• security: updating to API Version 2023-01-01 (#21531)
• Data Source: azurerm_virtual_network_gateway - add support for the field private_ip_address (#21432)
• azurerm_active_directory_domain_service - domain_name now supports a length up to 30 characters (#21555)
• azurerm_attestation_provider - adding support for the field open_enclave_policy_base64, sgx_enclave_policy_base64 and tpm_policy_base64 (#21524)
• azurerm_attestation_provider - adding support for the field sgx_enclave_policy_base64 (#21524)
• azurerm_attestation_provider - adding support for the field tpm_policy_base64 (#21524)
• azurerm_billing_account_cost_management_export - the field time_frame can now be set to TheLast7Days (#21528)
• azurerm_firewall_policy_rule_collection_group - the fields source_addresses and destination_addresses now accepts an IPv4 range (#21542)
• azurerm_kubernetes_cluster - add support for the service_mesh_profile block (#21516)
• azurerm_resource_group_cost_management_export - the field time_frame can now be set to TheLast7Days (#21528)
• azurerm_search_service - adding support for authentication_failure_mode (#21323)
• azurerm_search_service - adding support for customer_managed_key_enforcement_enabled (#21323)
• azurerm_search_service - adding support for hosting_mode (#21323)
• azurerm_search_service - adding support for local_authentication_enabled (#21323)
• azurerm_search_service - support for setting sku to StorageOptimizedL2 (#21323)
• azurerm_subscription_cost_management_export - the field time_frame can now be set to TheLast7Days (#21528)

BUG FIXES:

• Provider: fix an authentication bug when specifying auxiliary_tenant_ids whilst authenticating using Azure CLI (#21583)
• azurerm_attestation_provider - the field policy is deprecated and non-functional - instead please use the fields open_enclave_policy_base64, sgx_enclave_policy_base64 and tpm_policy_base64 (#21524)
• azurerm_mysql_flexible_server - fix issue where identity was not being removed properly on updates (#21533)
• azurerm_search_service - updating the default value for partition_count to 1 to match the API (#21323)
• azurerm_search_service - updating the default value for replica_count to 1 to match the API (#21323)
• azurerm_search_service - the field allowed_ips is now a Set rather than a List (#21323)

3.53.0 (April 20, 2023)

FEATURES:

• New Resource: azurerm_cost_management_scheduled_action (#21325)
• New Resource: azurerm_storage_mover_agent (#21273)
• New Resource: azurerm_storage_mover_source_endpoint (#21449)
• New Resource: azurerm_storage_mover_target_endpoint (#21449)

ENHANCEMENTS:

• advisor - refactoring to use hashicorp/go-azure-sdk (#21307)
• healthcare: refactoring to use hashicorp/go-azure-sdk (#21327)
• hpccache - refactoring to use hashicorp/go-azure-sdk (#21303)
• logz - refactoring to use hashicorp/go-azure-sdk (#21321)
• hpccache: updating to API Version 2023-01-01 (#21459)
• orbital: updating to API Version 2022-11-01 (#21405)
• vmware: updating to API Version 2022-05-01 (#21458)
• azurerm_attestation_provider - support for the policy block (#20972)
• azurerm_linux_function_app - support for the hosting_environment_id property (#20471)
• azurerm_linux_function_app_slot - support for the hosting_environment_id property (#20471)
• azurerm_linux_web_app - support for the hosting_environment_id property (#20471)
• azurerm_linux_web_app - support PHP 8.2 for the application_stack property (#21420)
• azurerm_linux_web_app_slot - support for the hosting_environment_id property (#20471)
• azurerm_linux_web_app_slot support PHP 8.2 for the application_stack property (#21420)
• azurerm_signalr_service - add addtional valid values for sku.0.capacity (#21494)
• azurerm_windows_function_app - support for the hosting_environment_id property (#20471)
• azurerm_windows_function_app_slot - support for the hosting_environment_id property (#20471)
• azurerm_windows_web_app - support for the hosting_environment_id property (#20471)
• azurerm_windows_web_app_slot - support for the hosting_environment_id property (#20471)

BUG FIXES:

• azurerm_cdn_endpoint - remove the length limit for the query_string property (#21474)
• azurerm_cognitive_account - mark the custom_question_answering_search_service_key property as sensitive (#21469)
• azurerm_monitor_metric_alert - fix crash when the dynamic_criteria.0.ignore_data_before property isn't set (#21446)
• azurerm_postgresql_flexible_server - correctly set the point_in_time_restore_time_in_utc property (#21501)
• azurerm_search_service - mark the primary_key and secondary_key properties as sensitive (#21469)

3.52.0 (April 13, 2023)

ENHANCEMENTS:

• containerRegistry - refactoring to use hashicorp/go-azure-sdk (#21344)
• monitor - refactoring to use hashicorp/go-azure-sdk (#21392)
• recoveryServices - refactoring to use hashicorp/go-azure-sdk (#21344)
• Data Source: azurerm_key_vault_certificate - add support for resource_manager_id and resource_manager_versionless_id (#21314)
• Data Source: azurerm_key_vault_secret - support for not_before_date and expiration_date (#21359)
• Data Source: azurerm_key_vault_secret - support specifying the keyvault secret version (#21336)
• azurerm_dashboard_grafana- support for UserAssigned identitiues (#21394)
• azurerm_key_vault_certificate - add support for resource_manager_id and resource_manager_versionless_id (#21314)
• azurerm_linux_function_app - mark the site_credential block as Sensitive (#21393)
• azurerm_linux_function_app_slot - mark the site_credential block as Sensitive (#21393)
• azurerm_linux_web_app - mark the site_credential block as Sensitive (#21393)
• azurerm_linux_web_app_slot - mark the site_credential block as Sensitive (#21393)
• azurerm_windows_function_app - mark the site_credential block as Sensitive (#21393)
• azurerm_windows_function_app_slot - mark the site_credential block as Sensitive (#21393)
• azurerm_windows_web_app - mark the site_credential block as Sensitive (#21393)
• azurerm_windows_web_app_slot - mark the site_credential block as Sensitive (#21393)

BUG FIXES:

• azurerm_app_configuration_key - extend timeout for polling resource to allow propagation of read permission (#21337)
• azurerm_app_configuration_feature - extend timeout for polling resource to allow propagation of read permission (#21337)
• azurerm_cdn_endpoint - the global_delivery_rule property must have at least one action specified (#21403)
• azurerm_kubernetes_cluster - the enable_host_encryption properly is not set when when resizing the default_node_pool (#21379)
• azurerm_linux_function_app - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_linux_function_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_linux_web_app - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_linux_web_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_service_plan - support for new Premium V3 and Memory Optimised SKUs (#21371)
• azurerm_storage_account_local_user - the ssh_authorized_key property can now be updated (#21362)
• azurerm_storage_mover - remove Microsoft.StorageMover from required list of Resource Providers (#21370)
• azurerm_subscription - fix an error during update (#21255)
• azurerm_windows_function_app - fix acrash in auth_v2 in active_directory_v2 (#21381)
• azurerm_windows_function_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_windows_web_app - fix a crash in auth_v2 in active_directory_v2 (#21381)
• azurerm_windows_web_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21381)

3.51.0 (April 06, 2023)

BREAKING CHANGES:

• azurerm_kubernetes_cluster - the sku_tier property no longer accepts the value Paid, it must be updated to Standard (#21256)

FEATURES:

• New Resource: azurerm_arc_kubernetes_cluster (#15401)
• New Resource: azurerm_resource_group_cost_management_view (#21112)
• New Resource: azurerm_signalr_service_custom_certificate (#21112)
• New Resource: azurerm_storage_mover (#21000)
• New Resource: azurerm_subscription_cost_management_view (#21112)
• New Resource: azurerm_voice_services_communications_gateway_test_line (#21111)

ENHANCEMENTS:

• dependencies: updating to v0.20230405.1143248 of github.com/hashicorp/go-azure-sdk (#21312)
• dependencies: updating to v0.20230331.1120327 of github.com/tombuildsstuff/kermit (#21235)
• dependencies: updating containerservice/2022-09-02-preview to 2023-02-02-preview (#21256)
• dependencies: updating search/2020-03-13 to search/2022-09-01 (#21250)
• batch: updating to API Version 2022-01-01.15.0 (from github.com/tombuildsstuff/kermit) (#21234)
• Data Source: azurerm_monitor_data_collection_rule - support for the data_collection_endpoint_id property (#21159)
• Data Source: azurerm_monitor_data_collection_rule - support for the identity and stream_declaration blocks (#21159)
• Data Source: azurerm_monitor_data_collection_rule - support for additional destinations, data_sources and data_flow transformations (#21159)
• azurerm_app_configuration_feature - support for the key property (#21252)
• azurerm_container_app - the app_port property is now optional (#20567)
• azurerm_healthcare_fhir_service - support for PATCH as an available value for cors (#21222)
• azurerm_healthcare_service - upport for PATCH as an available value for cors (#21222)
• azurerm_kubernetes_cluster - support KataMshvVmIsolation as a option for the workload_runtime property (#21176)
• azurerm_kubernetes_cluster_node_pool - support KataMshvVmIsolation as a option for the workload_runtime property (#21176)
• azurerm_monitor_data_collection_rule - support for the data_collection_endpoint_id property (#21159)
• azurerm_monitor_data_collection_rule - support for the identity and stream_declaration blocks (#21159)
• azurerm_monitor_data_collection_rule - support for additional destinations, data_sources and data_flow transformations (#21159)
• azurerm_signalr_service - support for the http_request_logs_enabled property (#21032)
• azurerm_snapshot - support for the incremental_enabled property (#21263)
• azurerm_web_pubsub_hub - support for the event_listener block (#21145)

BUG FIXES:

• Data Source: azurerm_app_configuration_keys - fixing a regression where the API doesn't return the http endpoint when listing items (#21208)
• Data Source: azurerm_kubernetes_cluster - prevent errors when used with limited permissions (#21229)
• azurerm_api_management - prevent error from empty response body when updating the resource (#21221)
• azurerm_application_gateway - correctly validate the firewall_policy_id property (#21238)
• azurerm_automation_software_update_configuration - time_zone correctly defaults to Etc/UTC (#21254)
• azurerm_digital_twins_time_series_database_connection - insensitively parse kusto_cluster_uri (#21243)
• azurerm_express_route_circuit - can now set authorization_key during creation (#21132)
• azurerm_kusto_eventhub_data_connection - insensitively parse identity_id if it applies to a Kusto Cluster (#21243)
• azurerm_linux_function_app - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_linux_function_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_linux_web_app - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_linux_web_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_monitor_diagnostic_setting - insensitively parse the resource's ID if it has been created for a Kusto Cluster (#21243)
• azurerm_mssql_database - fix a issue with short_term_retention_policy preventing creation (#21268)
• azurerm_windows_function_app - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_windows_function_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_windows_web_app - fix a crash in auth_v2 in active_directory_v2 (#21219)
• azurerm_windows_web_app_slot - fix a crash in auth_v2 in active_directory_v2 (#21219)

3.50.0 (March 30, 2023)

FEATURES:

• New DataSource: azurerm_container_app (#21199)
• New Resource: azurerm_web_pubsub_custom_certificate (#21114)

ENHANCEMENTS:

• dependencies: updating to v0.20230329.1052505 of github.com/hashicorp/go-azure-sdk (#21175)
• dependencies: updated azurerm_subscription to use new SDK (#18813)
• azurerm_databricks_access_connector - support for user assigned identities (#21059)
• azurerm_linux_function_app - add support for zip_deploy_file (#20544)
• azurerm_monitor_scheduled_query_rules_alert - trigger.x.metric_column is now optional (#21203)
• azurerm_mssql_database - HyperScale Skus now support long_term_retention_policy and short_term_retention_policy (#21166)
• azurerm_windows_function_app - add support for zip_deploy_file (#20544)

BUG FIXES:

• Data Source: azurerm_databricks_workspace_private_endpoint_connection: validating private_endpoint_id and workspace_id (#21129)
• Data Source: azurerm_healthcare_medtech_service - the workspace_id field is no longer marked as ForceNew (#21077)
• Data Source: azurerm_healthcare_medtech_service - support for Azure Environments other then Azure Public (#21077)
• azurerm_api_management - validating public_ip_address_id and subnet_id (#21129)
• azurerm_api_management_custom_domain - validating api_management_id (#21129)
• azurerm_api_management_policy - validating api_management_id (#21129)
• azurerm_api_management_gateway_api - validating api_id (#21129)
• azurerm_application_gateway - validating firewall_policy_id and subnet_id (#21129)
• azurerm_application_gateway - validating that data within the ssl_certificate block is a base64-encoded value (#21191)
• azurerm_application_insights_analytics_item - validating application_insights_id (#21129)
• azurerm_application_insights_api_key - validating application_insights_id (#21129)
• azurerm_application_insights_smart_detection_rule - validating application_insights_id (#21129)
• azurerm_application_insights_standard_webtests - validating application_insights_id (#21129)
• azurerm_application_insights_webtests - validating application_insights_id (#21129)
• azurerm_app_service_virtual_network_swift_connection - validating app_service_id and virtual_network_id (#21129)
• azurerm_bastion_host - validating public_ip_address_id (#21129)
• azurerm_container_registry - validating subnet_id (#21129)
• azurerm_database_migration_service - validating subnet_id (#21129)
• azurerm_databricks_workspace - validating load_balancer_backend_address_pool_id, machine_learning_workspace_id and virtual_network_id (#21129)
• azurerm_data_factory_linked_service_key_vault - validating key_vault_id (#21129)
• azurerm_data_factory_integration_runtime_managed - validating vnet_id (#21129)
• azurerm_data_share_dataset_kusto_cluster - validating kusto_cluster_id (#21129)
• azurerm_data_share_dataset_kusto_database - validating kusto_database_id (#21129)
• azurerm_eventhub_namespace - validating the subnet_id (#21129)
• azurerm_eventhub_namespace_disaster_recovery_config - fixing a bug where partner_namespace_id would validate with an empty string when the field should instead be omitted (#21129)
• azurerm_express_route_circuit_peering - validating route_filter_id (#21129)
• azurerm_express_route_gateway - validating virtual_hub_id (#21129)
• azurerm_eventhub - validating storage_account_id (#21129)
• azurerm_eventgrid_event_subscription - validating eventhub_resource_id, servicebus_queue_endpoint_id, servicebus_topic_endpoint_id and storage_account_id (#21129)
• azurerm_frontdoor - validating web_application_firewall_policy_link_id (#21129)
• azurerm_hdinsight_hadoop_cluster - validating storage_resource_id, subnet_id and virtual_network_id (#21129)
• azurerm_hdinsight_hbase_cluster - validating storage_resource_id, subnet_id and virtual_network_id (#21129)
• azurerm_hdinsight_interactive_query_cluster - validating storage_resource_id, subnet_id and virtual_network_id (#21129)
• azurerm_hdinsight_kafka_cluster - validating storage_resource_id, subnet_id and virtual_network_id (#21129)
• azurerm_hdinsight_spark_cluster - validating storage_resource_id, subnet_id and virtual_network_id (#21129)
• azurerm_healthcare_medtech_service - support for Azure Environments other then Azure Public (#21077)
• azurerm_hpc_cache - validating subnet_id (#21129)
• azurerm_image - validating managed_disk_id and source_virtual_machine_id (#21129)
• azurerm_iothub_certificate - certificate content now updates correctly (#21163)
• azurerm_iothub_dps_certificate - certificate content now updates correctly (#21163)
• azurerm_key_vault_access_policy - validating key_vault_id (#21129)
• azurerm_key_vault_certificate_issuer - validating key_vault_id (#21129)
• azurerm_kubernetes_cluster - validating vnet_subnet_id (#21129)
• azurerm_kubernetes_cluster_node_pool - validating vnet_subnet_id (#21129)
• azurerm_kusto_attached_database_configuration - validating the cluster_id (#21129)
• azurerm_kusto_cluster - validating subnet_id, engine_public_ip_id and data_management_public_ip_id (#21129)
• azurerm_kusto_eventgrid_data_connection - validating eventgrid_resource_id (#21129)
• azurerm_lb - validating public_ip_address_id, public_ip_prefix_id and subnet_id (#21129)
• azurerm_lb_nat_rule - validating the backend_address_pool_id (#21129)
• azurerm_linux_function_app - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_linux_function_app_slot - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_linux_web_app - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_linux_web_app_slot - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_linux_virtual_machine - validating application_security_group_ids and key_vault_id (#21129)
• azurerm_linux_virtual_machine_scale_set - validating key_vault_id, network_security_group_id, public_ip_prefix_id and subnet_id (#21129)
• azurerm_log_analytics_linked_service - validating the workspace id (#21170)
• azurerm_log_analytics_linked_storage_account - validating the storage_account_id (#21129)
• azurerm_logic_app_action_custom - validating logic_app_id (#21129)
• azurerm_logic_app_action_http - validating subnet_id (#21129)
• azurerm_logic_app_trigger_custom - validating logic_app_id (#21129)
• azurerm_logic_app_trigger_http_request - validating logic_app_id (#21129)
• azurerm_logic_app_trigger_recurrence - validating logic_app_id (#21129)
• azurerm_mssql_virtual_machine - the sql_license_type property is now optional (#21138)
• azurerm_managed_disk - validating disk_access_id and storage_account_id (#21129)
• azurerm_mariadb_virtual_network_rule - validating subnet_id (#21129)
• azurerm_monitor_action_group - validating automation_account_id and function_app_resource_id (#21129)
• azurerm_monitor_log_profile - validating storage_account_id (#21129)
• azurerm_mssql_database - fixing an int64 overflow for max_size_gb on 32-bit platforms (#21155)
• azurerm_mssql_database - validating subnet_id (#21129)
• azurerm_mysql_virtual_network_rule - validating subnet_id (#21129)
• azurerm_netapp_volume - validating subnet_id (#21129)
• azurerm_network_interface - validating public_ip_address_id and subnet_id (#21129)
• azurerm_network_interface_application_gateway_association - validating backend_address_pool_id and network_interface_id (#21129)
• azurerm_network_interface_application_security_group_association - validate application_security_group_id and network_interface_id (#21129)
• azurerm_network_interface_backend_address_pool_association - validating the backend_address_pool_id and subnet_id (#21129)
• azurerm_network_interface_network_security_group_association - validating network_security_group_id and subnet_id (#21129)
• azurerm_network_interface_nat_rule_association - validating network_interface_id and nat_rule_id (#21129)
• azurerm_network_profile - validating subnet_id (#21129)
• azurerm_network_watcher_flow_log - fixing the delete function to work reliably during deletion (#21129)
• azurerm_network_watcher_flow_log - validating storage_account_id (#21129)
• azurerm_orchestrated_virtual_machine_scale_set - validating application_security_group_ids, key_vault_id, proximity_placement_group_id, public_ip_prefix_id and subnet_id (#21129)
• azurerm_private_link_service - validating subnet_id (#21129)
• azurerm_public_ip - validating public_ip_prefix_id (#21129)
• azurerm_postgresql_virtual_network_rule - validating subnet_id is a subnet (#21129)
• azurerm_private_dns_zone_virtual_network_link - validating virtual_network_id (#21129)
• azurerm_role_definition - polling for longer during deletion (#21151)
• azurerm_sentinel_automation_rule - validating logic_app_id (#21129)
• azurerm_security_center_workspace - validating log_analytics_workspace_id (#21129)
• azurerm_security_center_automation - validating that a Scope is specified (#21129)
• azurerm_sql_managed_database - validating managed_instance_id (#21129)
• azurerm_sql_managed_instance - validating subnet_id (#21129)
• azurerm_static_site_custom_domain - validating static_site_id (#21129)
• azurerm_storage_account - updating the validation for ip_rules to highlight the IP Range that's invalid when the validation fails (#21178)
• azurerm_storage_account_network_rules - validating ip_rules (#21178)
• azurerm_storage_management_policy - validating storage_account_id (#21129)
• azurerm_subnet_nat_gateway_association - validating nat_gateway_id and subnet_id (#21129)
• azurerm_subnet_network_security_group_association - validating network_security_group_id and subnet_id (#21129)
• azurerm_subnet_route_table_association - validating subnet_id (#21129)
• azurerm_virtual_hub - validating virtual_wan_id (#21129)
• azurerm_virtual_machine_data_disk_attachment - validating managed_disk_id and virtual_machine_id (#21129)
• azurerm_virtual_network - validating ddos_protection_plan_id (#21129)
• azurerm_virtual_network_gateway - validating default_local_network_gateway_id and public_ip_address_id (#21129)
• azurerm_virtual_network_gateway_connection - validating express_route_circuit_id, local_network_gateway_id and peer_virtual_network_gateway_id (#21129)
• azurerm_web_application_firewall_policy - the match_values property is now optional (#21125)
• azurerm_windows_function_app - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_windows_function_app_slot - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_windows_virtual_machine_scale_set - validating application_security_group_ids, network_security_group_id, proximity_placement_group_id, public_ip_prefix_id, subnet_id and virtual_network_gateway_id (#21129)
• azurerm_windows_web_app - fix crash in auth_v2 in active_directory_v2 (#21113)
• azurerm_windows_web_app_slot - fix crash in auth_v2 in active_directory_v2 (#21113)

3.49.0 (March 23, 2023)

BREAKING CHANGES: App Service site_config

• ip_restriction blocks are no longer computed - changes to IP restrictions outside of Terraform will now present a diff
• scm_ip_restriction blocks are no longer computed - changes to SCM IP restrictions outside of Terraform will now present a diff
• cors blocks no longer require allowed_origins, however, if the property is supplied it must contain at least one item. Omitting this property will set the array empty

FEATURES:

• New Datasource: azurerm_orchestrated_virtual_machine_scale_set (#21050)
• New Resource: azurerm_databricks_virtual_network_peering #20728 (#20728)
• New Resource: azurerm_sentinel_threat_intelligence_indicator (#20771)
• New Resource: azurerm_voice_services_communications_gateway (#20607)

ENHANCEMENTS:

• dependencies: updating to v0.20230322.1105901 of hashicorp/go-azure-sdk (#21079)
• databricks: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#21004)
• azurerm_app_configuration_key - the resource's ID has been changed to match the Data Plane URL format to work around a number of bugs in the previous parsing logic (#20082)
• azurerm_app_configuration_feature - the resource's ID has been changed to match the Data Plane URL format to work around a number of bugs in the previous parsing logic (#20082)
• azurerm_express_route_circuit - add support for authorization_key (#21104)
• azurerm_media_job - updating to use API Version 2022-07-01 (#20956)
• azurerm_media_transform - updating to use API Version 2022-07-01 (#20956)
• azurerm_virtual_network_gateway - support for conditional/patch updates (#21009)
• azurerm_web_application_firewall_policy - the field operator within the match_conditions block can now be set to Any (#20971)
• azurerm_kubernetes_cluster - add missing property to oms_agent schema(#21046)
• azurerm_kubernetes_cluster - deprecate docker_bridge_cidr which is no longer supported by the API since docker is no longer a valid container runtime (#20952)
• azurerm_management_group_policy_assignment - support for the overrides and resource_selectors blocks (#20686)
• azurerm_mysql_flexible_server - support for the geo_backup_key_vault_key_id and geo_backup_user_assigned_identity_id properties (#20796)
• azurerm_resource_group_policy_assignment - support for the overrides and resource_selectors blocks (#20686)
• azurerm_resource_policy_assignment - support for the overrides and resource_selectors blocks (#20686)
• azurerm_role_assignment - support subscription aliases scopes (#20895)
• azurerm_signalr_service - support for public_network_access_enabled, local_auth_enabled, aad_auth_enabled, tls_client_cert_enabled, and serverless_connection_timeout_in_seconds properties (#20975)
• azurerm_subscription_policy_assignment - support for the overrides and resource_selectors blocks (#20686)
• azurerm_sentinel_log_analytics_workspace_onboarding - the resource_group_name and workspace_name properties have been deprecated in favour of workspace_id (#20661)
• azurerm_virtual_network_peering - adding an explicit default value for allow_forwarded_traffic, allow_gateway_transit and use_remote_gateways (#21009)
• azurerm_virtual_hub - support for the hub_routing_preference property (#21028)

BUG FIXES:

• azurerm_automation_account - the key_source property has been deprecated (#21041)
• azurerm_application_insights - the workspace_id can now be updated without creating a new resource (#21029)
• azurerm_firewall - Prevent duplicate name from being used for ip_configuration and management_ip_configuration (#21068)
• azurerm_kubernetes_cluster - replace calls to the deprecated accessProfiles endpoint with listUserCredentials (#20927)
• azurerm_kusto_cluster - language_extensions is now a Set rather than a List (#20951)
• azurerm_linux_function_app - fixan update bug with the health_check_eviction_time_in_min property (#21095)
• azurerm_linux_function_app - fixed processing of cors block (#20987)
• azurerm_linux_function_app - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_linux_function_app - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_linux_function_app - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_function_app - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_function_app_slot - fixed processing of cors block (#20987)
• azurerm_linux_function_app_slot - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_function_app_slot - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_function_app_slot - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_linux_function_app_slot - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_linux_web_app - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_linux_web_app - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_linux_web_app - fixed processing of cors block (#20987)
• azurerm_linux_web_app - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_web_app - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_web_app_slot - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_linux_web_app_slot - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_linux_web_app_slot - fixed processing of cors block (#20987)
• azurerm_linux_web_app_slot - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_linux_web_app_slot - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_machine_learning_datastore_blobstorage - fixan issue creating this resource in clouds other than public (#21016)
• azurerm_virtual_desktop_host_pool - changing the load_balancer_type property no longer creates a new resource (#20947)
• azurerm_windows_function_app - fixan update bug with the health_check_eviction_time_in_min property (#21095)
• azurerm_windows_function_app - fixed processing of cors block (#20987)
• azurerm_windows_function_app - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_windows_function_app - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_windows_function_app - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_function_app - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_function_app_slot - fixed processing of cors block (#20987)
• azurerm_windows_function_app_slot - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_windows_function_app_slot - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_windows_function_app_slot - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_function_app_slot - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_web_app - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_web_app - fixed processing of cors block (#20987)
• azurerm_windows_web_app - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_web_app - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_windows_web_app - fixread for token_store_enabled to correctly set returned value in state (#21091)
• azurerm_windows_web_app_slot - the ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_web_app_slot - fixed processing of cors block (#20987)
• azurerm_windows_web_app_slot - the scm_ip_restriction block can is now successfully removed by removing from config (#20987)
• azurerm_windows_web_app_slot - fixauth_v2 active_directory_v2 sending empty data (#21091)
• azurerm_windows_web_app_slot - fixread for token_store_enabled to correctly set returned value in state (#21091)

3.48.0 (March 16, 2023)

FEATURES:

• New Data Source: azurerm_mobile_network_sim_policy [FGH-20732]
• New Resource: azurerm_express_route_port_authorization (#20736)
• New Resource: azurerm_mobile_network_sim_policy (#20732)
• New Resource: azurerm_site_recovery_vmware_replication_policy (#20881)
• New Resource: azurerm_sentinel_alert_rule_anomaly_duplicate (#20760)

ENHANCEMENTS:

• dependencies: updating to v0.20230316.1132628 of github.com/hashicorp/go-azure-sdk (#20986)
• signalr: updating to API Version 2023-02-01 (#20910)
• webpubsub: updating to API Version 2023-02-01 (#20910)
• azurerm_express_route_gateway - support for the allow_non_virtual_wan_traffic property (#20667)
• azurerm_ssh_public_key - allow . for name validation (#20955)

BUG FIXES:

• provider: fix an authentication bug which sometimes caused access tokens to be refreshed too late (#20894)
• azurerm_bot_channel_directline - fixing an issue where an empty site was passed to the API (#20890)
• azurerm_healthcare_dicom_service - extending the create and update timeouts to 90 minutes (#20932)
• azurerm_kusto_eventhub_data_connection - fixing an issue where an existing resource wouldn't be flagged during creation (#20926)
• azurerm_linux_function_app - Fixed apply time validation when using WEBSITE_CONTENTOVERVNET  (#18258)
• azurerm_windows_function_app - Fixed apply time validation when using WEBSITE_CONTENTOVERVNET (#18258)

3.47.0 (March 09, 2023)

FEATURES:

• New Resource: azurerm_sentinel_metadata (#20801)

ENHANCEMENTS

• dependencies: updating to v4.4.0+incompatible of github.com/gofrs/uuid (#20821)
• dependencies: updating to v0.55.0 of github.com/hashicorp/go-azure-helpers (#20807)
• dependencies: updating to version v0.20230309.1123256 of github.com/hashicorp/go-azure-sdk (#20810)
• dependencies: updating to v0.20230307.1105329 of github.com/tombuildsstuff/kermit (#20821)
• dependencies: updating redis/2021-06-01 to redis/2022-06-01 (#20839)
• dashboard: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20810)
• media: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20810)
• servicebus: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20810)
• Data Source: azurerm_function_app_host_keys - exporting blobs_extension_key (#20837)
• Data Source: azurerm_servicebus_namespace - exporting endpoint (#20790)
• Data Source: azurerm_kubernetes_cluster - generate and export node_resource_group_id (#20830)
• azurerm_kubernetes_cluster - generate and export node_resource_group_id (#20830)
• azurerm_kubernetes_cluster - support for thevertical_pod_autoscaler_enabled property (#20751)
• azurerm_kubernetes_cluster - support for the msi_auth_for_monitoring_enabled property (#20757)
• azurerm_kubernetes_cluster - the vm_size property of the default_node_pool is no longer ForceNew and can be resized by specifying temporary_name_for_rotation (#20628)
• azurerm_mariadb_server - support for the ssl_minimal_tls_version_enforced property (#20782)
• azurerm_monitor_action_group - support for the location property (#20603)
• azurerm_mssql_database - support for ServerlessGen5 Hyperscale (#20875)
• azurerm_mssql_managed_database - support for retention policies (#20845)
• azurerm_servicebus_namespace - exports the endpoint attribute (#20790)
• azurerm_virtual_network_peering - support for the triggers property to allow address_space synchronization (#20877)

BUG FIXES:

• provider: fix an issue with authentication using oidc_token_file_path (#20824)
• provider: fix an issue with Azure CLI authentication when running in Azure Cloud Shell (#20824)
• azurerm_application_insights_analytics_item - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_automated_connection_type - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_automation_software_update_configuration - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_automation_source_control - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_automation_watcher - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_cdn_frontdoor_origin - fixregression where origin_host_header value would be inadvertently removed (#20874)
• azurerm_cdn_frontdoor_route_disable_link_to_default_domain - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_container_registry_task - fixupdating failed due to incomplete registry_credential (#20841)
• azurerm_digital_twins_time_series_database_connection - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_fluid_relay_server - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_function_app_active_slot - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_iothub_endpoint_eventhub - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_iothub - fixwrong default value of file_upload.sas_ttl when not specified (#20854)
• azurerm_iothub_endpoint_servicebus_queue - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_iothub_endpoint_servicebus_topic - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_iothub_endpoint_servicebus_queue - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_iothub_endpoint_storage_container - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_iothub_fallback_route - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_iothub_route - marking the resource as gone when it's been deleted outside of Terraform (#20798)
• azurerm_kubernetes_cluster - fixvalidation logic for dns_prefix (#20813)
• azurerm_linux_function_app_slot - fixhealth_check_eviction_time_in_min (#20816)
• azurerm_logic_app_integration_account - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_maintenance_assignment_virtual_machine - prevent a potential panic from a nil value (#20781)
• azurerm_maintenance_assignment_virtual_machine - maintenance configuration is now obtained by name rather than using the first in the list (#20766)
• azurerm_nginx_certificate - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_nginx_configuration - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_nginx_deployment - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_synapse_workspace_aad_admin - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_synapse_workspace_key - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_synapse_workspace_sql_aad_admin - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_web_app_active_slot - marking the resource as gone when it's been deleted outside of Terraform (#20797)
• azurerm_windows_function_app_slot - fixhealth_check_eviction_time_in_min (#20816)

3.46.0 (March 02, 2023)

FEATURES

• New Data Source: azurerm_mobile_network_data_network (#20338)
• New Data Source: azurerm_sentinel_alert_rule_anomaly_built_in (#20368)
• New Resource: azurerm_mobile_network_data_network (#20338)
• New Resource: azurerm_sentinel_alert_rule_anomaly_built_in (#20368)
• New Resource: azurerm_sentinel_alert_rule_threat_intelligence (#20739)

ENHANCEMENTS

• dependencies: updating to v0.20230228.1160358 of github.com/hashicorp/go-azure-sdk (#20688)
• dependencies: updating to v0.20230224.1120200 of github.com/tombuildsstuff/kermit (#20649)
• dependencies: updating containerservice/2022-09-02-preview to 2023-01-02-preview (#20734)
• dependencies: updating hybridCompute/2022-03-10 to 2022-11-10 (#20733)
• aadb2c: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20715)
• databoxedge - switching to use github.com/hashicorp/go-azure-sdk (#20638)
• dns: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20688)
• maps: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20688)
• signalr: refactoring to use hashicorp/go-azure-sdk as a base layer rather than Azure/go-autorest (#20688)
• compute/shared_image_gallery - switching to use github.com/hashicorp/go-azure-sdk (#20599)
• compute/gallery_application - switching to use github.com/hashicorp/go-azure-sdk (#20599)
• compute/gallery_application_version - switching to use github.com/hashicorp/go-azure-sdk (#20599)
• iottimeseriesinsights - switching to use github.com/hashicorp/go-azure-sdk (#20416)
• policy/assignment - switching to use github.com/hashicorp/go-azure-sdk (#20638)
• sentinel/alert_rule - switching to use github.com/hashicorp/go-azure-sdk (#20680)
• sentinel/automation_rule - switching to use github.com/hashicorp/go-azure-sdk (#20726)
• Data Source: azurerm_linux_function_app - support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)
• Data Source:azurerm_windows_function_app -support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)
• azurerm_app_service_connection - support for the secret_store block (#20613)
• express_route_circuit_peering_resource - support for the advertised_communities property (#20708)
• azurerm_healthcare_service - extend range of the cosmosdb_throughput to a maximum of 100000 (#20755)
• azurerm_key_vault_key - support for the rotation_policy block (#19113)
• azurerm_kubernetes_cluster - support for Standard with the sku_tier (#20734)
• azurerm_linux_function_app - support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)
• azurerm_linux_function_app_slot - support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)
• azurerm_media_streaming_policy - support for the common_encryption_cbcs.clear_key_encryption, common_encryption_cenc.clear_key_encryption, common_encryption_cenc.clear_track, common_encryption_cenc.content_key_to_track_mapping and envelope_encryption properties (#20524)
• azurerm_orchestrated_virtual_machine_scale_set - support for the priority_mix property (#20618)
• azurerm_storage_management_policy - support for auto_tier_to_hot_from_cool_enabled (#20641)
• azurerm_spring_cloud_connection - support for the secret_store block (#20613)
• azurerm_windows_function_app - support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)
• azurerm_windows_function_app_slot - support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20722)

BUG FIXES

• Data Source: azurerm_automation_variable_bool - fixed a regression in read (#20665)
• Data Source: azurerm_automation_variable_datetime - fixed a regression in read (#20665)
• Data Source: azurerm_automation_variable_int - fixed a regression in read (#20665)
• Data Source: azurerm_automation_variable_string - fixed a regression in read (#20665)
• azurerm_aadb2c_directory - fixing a crash when the connection dropped (#20670)
• azurerm_cdn_frontdoor_origin - origin_host_header can now be cleared once it has been set (#20679)
• azurerm_container_app - fixing a crash when the connection dropped (#20670)
• azurerm_communication_service - changing the data_location property now creates a new resource (#20711)
• azurerm_eventhub_cluster - fixing a crash when the connection dropped (#20670)
• azurerm_eventhub_namespace - fixing a crash when the connection dropped (#20670)
• azurerm_eventhub_namespace_disaster_recovery_config - fixing a crash when the connection dropped (#20670)
• azurerm_kubernetes_cluster_node_pool - fixing a crash when the connection dropped (#20670)
• azurerm_iothub_dps - fixing a crash when the connection dropped (#20670)
• azurerm_media_services_account: fix crash around key_delivery_access_control (#20685)
• azurerm_netapp_account - fixing a crash when the connection dropped (#20670)
• azurerm_netapp_pool - fixing a crash when the connection dropped (#20670)
• azurerm_netapp_snapshot - fixing a crash when the connection dropped (#20670)
• azurerm_netapp_snapshot_policy - fixing a crash when the connection dropped (#20670)
• azurerm_netapp_volume - fixing a crash when the connection dropped (#20670)
• azurerm_netapp_volume - fixpotential nil panic in resource read (#20662)
• azurerm_notification_hub - fixing a crash when the connection dropped (#20670)
• azurerm_notification_hub_namespace - fixing a crash when the connection dropped (#20670)
• azurerm_proximity_placement_group - will now correctly update when a vm is attached (#20131)
• azurerm_sentinel_log_analytics_workspace_onboard - fixing a crash when the connection dropped (#20670)
• azurerm_servicebus_namespace_disaster_recovery_config - fixing a crash when the connection dropped (#20670)
• azurerm_storage_object_replication - now functions when cross tenant replication is disabled (#20132)

3.45.0 (February 23, 2023)

FEATURES

• App Service - Add authV2 to Web Apps (#20449)
• New Resource: azurerm_site_recovery_hyperv_replication_policy (#20454)
• New Resource: azurerm_site_recovery_hyperv_replication_policy_association (#20630)

ENHANCEMENTS

• dependencies: updating to v0.20230222.1094703 of github.com/hashicorp/go-azure-sdk (#20610)
• dependencies: updating to v0.7.0 of golang.org/x/net (#20541)
• automation - switching to use github.com/hashicorp/go-azure-sdk (#20568)
• compute/capacityreservations - switching to use github.com/hashicorp/go-azure-sdk (#20580)
• compute/capacityreservationgroups - switching to use github.com/hashicorp/go-azure-sdk (#20580)
• kusto - switching to use github.com/hashicorp/go-azure-sdk (#20563)
• azurerm_backup_policy_vm - add support for instant_restore_resource_group (#20562)
• azurerm_express_route_connection - support for the inbound_route_map_id, outbound_route_map_id, and enabled_private_link_fast_path properties (#20619)
• azurerm_kusto_cluster_customer_managed_key - key_version is now Optional to allow for auto-rotation of key (#20583)
• azurerm_linux_virtual_machine - strengthen validation for admin_password (#20558)
• azurerm_linux_web_app - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)
• azurerm_linux_web_app_slot - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)
• azurerm_postgresql_flexible_server - a server can now be created without enabling password authtication (#20578)
• azurerm_media_streaming_endpoint - add support for reading sku and increase limit for scale_units (#20585)
• azurerm_recovery_services_vault - add support for classic_vmware_replication_enabled (#20473)
• azurerm_windows_virtual_machine - strengthen validation for admin_password (#20558)
• azurerm_windows_web_app - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)
• azurerm_windows_web_app_slot - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)
• Data Source: azurerm_linux_web_app - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)
• Data Source:azurerm_windows_web_app - add support for AuthV2 (EasyAuthV2) auth_settings_v2 (#20449)

BUG FIXES

• Data Source: azurerm_linux_web_app - set virtual_network_subnet_id correctly (#20577)
• Data Source: azurerm_redis_cache - fixissue when no patch schedules can be found (#20516)
• Data Source: azurerm_windows_web_app - set virtual_network_subnet_id correctly (#20577)
• azurerm_batch_pool - set user assigned id for azure_blob_file_system correctly (#20560)
• azurerm_iot_dps - allow older resources to update without having set data_residency_enabled (#20632)
• azurerm_kubernetes_cluster - prevent crash when SecurityProfile is nil (#20584)
• azurerm_log_analytics_workspace - prevent ForceNew when sku is LACluster (#19608)
• azurerm_media_streaming_endpoint - set and update tags properly (#20585)
• azurerm_mobile_network_sim_group - update identity to only support User Assigned Identities (#20474)
• azurerm_monitor_diagnostic_setting - the log_analytics_destination_type property is nto computer rather then defaulting to AzureDiagnostics on new resources (#20203)

3.44.1 (February 17, 2023)

ENHANCEMENTS

• dependencies: updating to v0.20230217.1150808 of github.com/hashicorp/go-azure-sdk (#20539)

BUG FIXES

• authentication: fixing an issue when obtaining the auth token for Resource Manager in Azure Government (#20523)
• authentication: fixing an issue where the default subscription ID was not detected when authenticating using Azure CLI (#20526)
• authentication: fixing an issue where Managed Identity authentication would fail (#20523)
• Data Source: azurerm_app_configuration_key - fixing an issue where the App Configuration was misleadingly marked as gone when the data plane client couldn't be build (#20533)
• Data Source: azurerm_app_configuration_key - surfacing the error when a data plane client can't be built (#20533)
• Data Source: azurerm_app_configuration_keys - fixing an issue where the App Configuration was misleadingly marked as gone when the data plane client couldn't be build (#20533)
• Data Source: azurerm_app_configuration_keys - surfacing the error when a data plane client can't be built (#20533)
• azurerm_app_configuration_feature - fixing an issue where the App Configuration was misleadingly marked as gone when the data plane client couldn't be build (#20533)
• azurerm_app_configuration_feature - surfacing the error when a data plane client can't be built (#20533)
• azurerm_app_configuration_key - fixing an issue where the App Configuration was misleadingly marked as gone when the data plane client couldn't be build (#20533)
• azurerm_app_configuration_key - surfacing the error when a data plane client can't be built (#20533)
• azurerm_kubernetes_cluster - fixa crash when securityProfile is nil in the API Response (#20517)
• azurerm_logic_app_standard - fixing an issue where the storage endpoint suffix couldn't be found (#20536)
• azurerm_synapse_role_assignment - fixing an issue where the Synapse domain suffix couldn't be found (#20536)

3.44.0 (February 16, 2023)

FEATURES:

• New Data Source: azurerm_hybrid_compute_machine (#20211)
• New Data Source: azurerm_policy_definition_built_in (#19933)
• New Data Source: azurerm_mobile_network_service (#20337)
• New Data Source: azurerm_mobile_network_site (#20334)
• New Data Source: azurerm_mobile_network_slice (#20336)
• New Data Source: azurerm_mobile_network_sim_group (#20339)
• New Data Source: azurerm_virtual_desktop_host_pool (#20505)
• New Resource: azurerm_network_manager_security_admin_configuration (#20233)
• New Resource: azurerm_network_manager_admin_rule_collection (#20233)
• New Resource: azurerm_network_manager_admin_rule (#20233)
• New Resource: azurerm_mobile_network_service (#20337)
• New Resource: azurerm_mobile_network_site (#20334)
• New Resource: azurerm_mobile_network_slice (#20336)
• New Resource: azurerm_mobile_network_sim_group [GH-20339
• New Resource: azurerm_site_recovery_services_vault_hyperv_site [GH-204309

ENHANCEMENTS:

• dependencies: updating to v0.20230216.1112535 of github.com/hashicorp/go-azure-sdk (#20465)
• dependencies: no longer utilizing github.com/manicminer/hamilton (#20320)
• provider: support for the client_certificate provider property (#20320)
• provider: support for the use_cli provider property (#20320)
• provider: authentication now uses the github.com/hashicorp/go-azure-sdk/sdk/auth package (#20320)
• provider: cloud configuration now uses the github.com/hashicorp/go-azure-sdk/sdk/environments package (#20320)
• datashare: refactoring to use github.com/hashicorp/go-azure-sdk (#20501)
• managementlocks: refactoring to use github.com/hashicorp/go-azure-sdk (#20387)
• media: refactoring StreamingEndpoints to use API Version 2022-08-01 (#20457)
• postgres - updating API to 2022-12-01 (#20370)
• Data Source: azurerm_policy_definition - support for the mode property (#20420)
• Data Source: azurerm_key_vault_certificates - now exports the certificates block (#20498)
• Data Source: azurerm_key_vault_secrets - now exports the secrets block (#20498)
• azurerm_api_management - support for the delegation block (#20399)
• azurerm_container_app - now supports multiple container blocks (#20423)
• azurerm_cognitive_account - the field sku_name can now be set to DC0 (#20426)
• azurerm_container_app - support for the registry.identity property (#20466)
• azurerm_data_factory_linked_service_azure_blob_storage - Add support for connection_string_insecure [Gh-20494]
• azurerm_express_route_port - support for the billing_type property (#20361)
• azurerm_kubernetes_cluster - the web_app_routing.dns_zone_id property now accepts an empty string for BYO DNS (#20341)
• azurerm_linux_virtual_machine - validating that the value for the admin_username property isn't a disallowed username (#20424)
• azurerm_windows_virtual_machine - validating that the value for the admin_username property isn't a disallowed username (#20424)

BUG FIXES:

• Data Source: azurerm_aadb2c_directory - fixing a bug where the Data Source didn't return an error when the AAD B2C was not found (#20479)
• Data Source: azurerm_app_service_environment_v3 - fixing a bug where the Data Source didn't return an error when the App Service Environment was not found (#20479)
• Data Source: azurerm_consumption_budget_resource_group - using the correct timeout value (#20479)
• Data Source: azurerm_consumption_budget_resource_group - fixing a bug where the Data Source didn't return an error when the Consumption Budget Resource Group was not found (#20479)
• Data Source: azurerm_data_protection_backup_vault - fixing a bug where the Data Source didn't return an error when the Data Protection Backup Vault was not found (#20479)
• Data Source: azurerm_databox_edge_device - fixing a bug where the Data Source didn't return an error when the DataBox Edge Device was not found (#20479)
• Data Source: azurerm_healthcare_dicom - fixing a bug where the Data Source didn't return an error when the HealthCare DICOM was not found (#20479)
• Data Source: azurerm_healthcare_fhir - fixing a bug where the Data Source didn't return an error when the HealthCare FHIR was not found (#20479)
• Data Source: azurerm_healthcare_medtech_service - fixing a bug where the Data Source didn't return an error when the HealthCare MedTech Service was not found (#20479)
• Data Source: azurerm_key_vault_certificate_data - fixing a bug where the Data Source didn't return an error when the KeyVault Certificate was not found (#20479)
• Data Source: azurerm_key_vault_certificate - fixing a bug where the Data Source didn't return an error when the KeyVault Certificate was not found (#20479)
• Data Source: azurerm_lb_outbound_rule - fixing a bug where the Data Source didn't return an error when the Load Balancer Outbound Rule was not found (#20479)
• Data Source: azurerm_lb_rule - fixing a bug where the Data Source didn't return an error when the Load Balancer Rule was not found (#20479)
• Data Source: azurerm_local_network_gateway - fixing a bug where the Data Source didn't return an error when the Local Network Gateway was not found (#20479)
• Data Source: azurerm_mobile_network - fixing a bug where the Data Source didn't return an error when the Mobile Network was not found (#20479)
• Data Source: azurerm_monitor_data_collection_endpoint - fixing a bug where the Data Source didn't return an error when the Monitor Data Collection Endpoint was not found (#20479)
• Data Source: azurerm_mssql_managed_instance - fixing a bug where the Data Source didn't return an error when the MSSQL Managed Instance was not found (#20479)
• Data Source: azurerm_policy_assignment - fixing a bug where the Data Source didn't return an error when the Policy Assignment was not found (#20479)
• Data Source: azurerm_redis_enterprise_database - fixing a bug where the Data Source didn't return an error when the Redis Enterprise Database was not found (#20479)
• Data Source: azurerm_servicebus_namespace_disaster_recovery_config - fixing a bug where the Data Source didn't return an error when the ServiceBus Namespace Disaster Recovery Config was not found (#20479)
• Data Source: azurerm_site_recovery_replication_recovery_plan - fixing a bug where the Data Source didn't return an error when the Site Recovery Replication Recovery Plan was not found (#20479)
• Data Source: azurerm_storage_blob - fixing a bug where the Data Source didn't return an error when the Blob was not found (#20479)
• Data Source: azurerm_storage_table_entity - fixing a bug where the Data Source didn't return an error when the Table Entity was not found (#20479)
• Data Source: azurerm_vpn_gateway - fixing a bug where the Data Source didn't return an error when the VPN Gateway was not found (#20479)
• Data Source: azurerm_web_pubsub - fixing a bug where the Data Source didn't return an error when the Web PubSub was not found (#20479)
• azurerm_backup_protected_vm - will now correctly delete (#20469)
• azurerm_eventhub - changing the partition_count property now works by creating a new resource (#20480)
• azurerm_eventgrid_domain_topic - the name property can now be up to 128 characters (#20407)
• azurerm_kubernetes_cluster - parsing the API response for the log_analytics_workspace_id field case-insensitively (#20484)
• azurerm_private_endpoint - normalizing the private_connection_resource_id propety for a redis cache (#20418)
• azurerm_private_endpoint - consistently normalizing the value returned from the API for private_connection_resource_id (#20452)
• azurerm_recovery_services_vault - updating cross_region_restore_enabled to false recreates the resource since this operation isn't supported by the API (#20406)
• azurerm_storage_management_policy - the rule.filters property is now Required since storage management policies fail if it's unspecified (#20448)

3.43.0 (February 09, 2023)

FEATURES

• New Data Source: azurerm_container_app_environment (#18008)
• New Data Source: azurerm_container_app_environment_certificate (#18008)
• New Data Source: azurerm_mobile_network (#20128)
• New Resource: azurerm_container_app_environment (#18008)
• New Resource: azurerm_container_app_environment_storage (#18008)
• New Resource: azurerm_container_app_environment_dapr_component (#18008)
• New Resource: azurerm_container_app_environment_certificate (#18008)
• New Resource: azurerm_container_app (#18008)
• New Resource: azurerm_machine_learning_datastore_fileshare (#19934)
• New Resource: azurerm_machine_learning_datastore_datalake_gen2 (#20045)
• New Resource: azurerm_mobile_network (#20128)
• New Resource: azurerm_sentinel_data_connector_microsoft_threat_intelligence (#20273)

ENHANCEMENTS:

• dependencies: updating to v0.11.28 of github.com/Azure/go-autorest/autorest (#20272)
• dependencies: updating to v0.50.0 of github.com/hashicorp/go-azure-helpers (#20272)
• dependencies: updating to v0.20230208.1165725 of github.com/hashicorp/go-azure-sdk (#20381)
• dependencies: updating to v0.55.0 of github.com/manicminer/hamilton (#20272)
• dependencies: updating to v0.20230208.1135849 of github.com/tombuildsstuff/kermit (#20381)
• dependences: updating postgresql/2021-06-01/databases to 2022-12-01 (#20369)
• appservice: updating to API Version 2021-03-01 (#20349)
• azurestackhci: refactoring to use github.com/hashicorp/go-azure-sdk (#20318)
• batch: refactoring to use github.com/hashicorp/go-azure-sdk (#20375)
• databricks: refactoring to use github.com/hashicorp/go-azure-sdk (#20309)
• datadog: refactoring to use github.com/hashicorp/go-azure-sdk (#20311)
• databoxedge: refactoring to use github.com/hashicorp/go-azure-sdk (#20236)
• digitaltwins: refactoring to use github.com/hashicorp/go-azure-sdk (#20318)
• postgresql: updating to API Version 2022-12-01 (#20367)
• redis: refactoring to use github.com/hashicorp/go-azure-sdk (#20313)
• azurerm_media_streaming_locator - support for the filter_names property (#20274)
• azurerm_media_live_event_output - support for the rewind_window_duration property (#20271)
• azurerm_media_streaming_live_event - support for the stream_options property (#20254)
• azurerm_storage_blob_inventory_policy - support for the exclude_prefixes property (#20281)
• azurerm_sentinel_alert_rule_nrt - support for the dynamic_property block (#20212)
• azurerm_sentinel_alert_rule_nrt - support for the sentinel_entity_mapping block (#20230)
• azurerm_sentinel_alert_rule_nrt - support for the event_grouping block (#20231)
• azurerm_sentinel_alert_rule_scheduled - support for the dynamic_property block (#20212)
• azurerm_sentinel_alert_rule_scheduled - support for the sentinel_entity_mapping block (#20230)
• azurerm_shared_image - support for the confidential_vm_supported and confidential_vm_enabled properties (#20249)
• azurerm_postgresql_flexible_server - support for replication_role and new enum value Replica for create_mode (#20364)

BUG FIXES:

• azurerm_custom_provider - switching a spurious usage of Azure/azure-sdk-for-go to hashicorp/go-azure-sdk (#20315)
• azurerm_function_app_function - prevent a bug with multiple file blocks resulting in last file being used for all entries (#20198)
• azurerm_monitor_diagnostic_setting - changing the storage_account_id, eventhub_authorization_rule_id, and eventhub_name properties no longer creates a new resource (#20307)
• azurerm_redis_enterprise_cluster - switching a spurious usage of Azure/azure-sdk-for-go to hashicorp/go-azure-sdk (#20314)
• azurerm_service_fabric_managed_cluster - fixpotential panic when setting node_type (#20345)
• azurerm_web_application_firewall_policy - prevent a failure caused by changing the order of the disabled_rules properties (#20285)
• azurerm_databricks_access_connector - name can now be up to 64 character in length (#20353)

3.42.0 (February 02, 2023)

FEATURES

• New Resource: azurerm_ip_group_cidr (#20225)
• New Resource: azurerm_network_manager_connectivity_configuration (#20133)

ENHANCEMENTS:

• dependencies: updating to v0.20230130.1140358 of github.com/hashicorp/go-azure-sdk (#20293)
• databasemigration: refactoring to use github.com/hashicorp/go-azure-sdk (#20214)
• servicefabric: refactoring to use github.com/hashicorp/go-azure-sdk (#20202)
• azurerm_kubernetes_cluster - add support for the confidential_computing add-on (#20194)
• azurerm_kubernetes_cluster - export the identity for the aci_connector_linux add-on (#20194)
• azurerm_lb_backend_address_pool - support for the virtual_network_id property (#20205)
• azurerm_postgresql_flexible_server: add default value for authentication.active_directory_auth_enabled and authentication.password_auth_enabled (#20054)
• azurerm_site_recovery_protection_container_mapping - support for the automatic_update block (#19710)
• azurerm_site_recovery_replicated_vm - support for the unmanaged_disk, target_proximity_placement_group_id, target_boot_diag_storage_account_id, target_capacity_reservation_group_id, target_virtual_machine_scale_set_id, multi_vm_group_name, target_edge_zone, and test_network_id properties (#19939)

BUG FIXES:

• data.azurerm_monitor_data_collection_rule - raises an error when the specified data collection rule can't be found (#20282)
• azurerm_federated_identity_credential - prevent a perpetual diff (#20219)
• azurerm_linux_function_app - fixlinuxFxVersion for docker registry_url processing (#18194)
• azurerm_monitor_aad_diagnostic_setting - the field log_analytics_workspace_id is now parsed case-insensitively from the API Response (#20206)

3.41.0 (January 26, 2023)

FEATURES

• New Data Source: azurerm_key_vault_certificates (#19498)
• New Data Source: azurerm_site_recovery_replication_recovery_plan (#19940)
• New Resource: azurerm_orbital_contact (#19036)
• New Resource: azurerm_site_recovery_replication_recovery_plan (#19940)

ENHANCEMENTS:

• dependencies: updating to v0.20230124.1111819 of github.com/hashicorp/go-azure-sdk (#20160)
• resourceproviders: no longer registering Microsoft.ServiceFabricMesh by default (#20165)
• testing: refactoring to use hashicorp/terraform-plugin-testing (#20114)
• devtestlabs: refactoring to use github.com/hashicorp/go-azure-sdk (#20139)
• logic: refactoring to use github.com/hashicorp/go-azure-sdk (#20144)
• network: updating to API version 2022-07-01 (#20097)
• postgresql: updating to API version 2022-03-08-preview (#20073)
• streamanalytics: updating to API Version 2021-10-01-preview (#20145)
• azurerm_*_app_slot - support for slots to be placed in different service plans (#20184)
• azurerm_databricks_workspace - support for customer managed keys for managed disks attached to the workspace (#19992)
• azurerm_databricks_workspace - support for updating the properties public_network_access_enabled, network_security_group_rules_required and managed_services_cmk_key_vault_key_id (#19992)
• azurerm_kubernetes_cluster - support for node_public_ip_tags (#19731)
• azurerm_kubernetes_cluster_node_pool - support for node_public_ip_tags (#19731)
• azurerm_log_analytics_workspace - support for the local_authentication_disabled property (#20092)
• azurerm_postgresql_flexible_server - support for customer managed keys (#20086)
• azurerm_storage_account - support for AADKERB to azure_files_authentication.0.directory_type (#20168)

BUG FIXES:

• azurerm_stream_analytics_output_servicebus_queue - shared access policy name and key are now optional for MSI authentication (#19712)
• azurerm_stream_analytics_output_servicebus_topic - shared access policy name and key are now optional for MSI authentication (#19708)

3.40.0 (January 19, 2023)

FEATURES

• New Data Source: azurerm_bastion_host (#20062)
• New Resource: azurerm_lab_service_schedule (#19977)
• New Resource: azurerm_machine_learning_datastore_blobstorage (#19909)
• New Resource: azurerm_network_manager_scope_connection (#19610)
• New Resource: azurerm_network_manager_static_member (#20077)
• New Resource: azurerm_sentinel_log_analytics_workspace_onboarding (#19692)

ENHANCEMENTS:

• dependencies: updating to v0.20230117.1125206 of github.com/hashicorp/go-azure-sdk (#20081)
• azurerm_application_gateway - support for TLS 1.3 and CustomV2 (#20029)
• azurerm_kubernetes_cluster - support for the key_management_service block (#19893)
• azurerm_linux_web_app - support for Python 3.11 (#20001)
• azurerm_linux_web_app_slot - support for Python 3.11 (#20001)
• azurerm_ip_group - support for the firewall_ids and firewall_policy_ids properties (#19845)
• azurerm_recovery_services_vault - support for the immutability, user assigned identity and use_system_assigned_identity properties (#20109)
• azurerm_synapse_sql_pool - support for geo_backup_policy_enabled and fix recovery_database_id [(#20010)

BUG FIXES:

• Data Source: azurerm_batch_pool - the field password is now correctly marked as a sensitive value (#20061)
• Data Source: azurerm_batch_pool - the field ssh_private_key is now correctly marked as a sensitive value (#20061)
• azurerm_api_management_identity_provider_twitter - the field api_key is now correctly marked as a sensitive value (#20061)
• azurerm_cdn_frontdoor_origin_group - shim SDK to allow health_probe to be passed as null (#20015)
• azurerm_container_group - fix dynamic setting dns_config crash issue (#20002)
• azurerm_container_registry_task - the field password is now correctly marked as a sensitive value (#20061)
• azurerm_dev_test_windows_virtual_machine - the password field is now correctly marked as a sensitive value (#20061)
• azurerm_federated_identity_credential - preent concurrent write to parent resource (#20003)
• azurerm_linux_web_app_slot - fixa bug where use_32_bit_worker would not be set correctly (#20051)
• azurerm_postgresql_flexible_server_configuration - restart server when required (#20044)
• azurerm_kubernetes_cluster - prevent a possible panic while importing (#20107)
• azurerm_service_fabric_managed_cluster - the password field is now correctly marked as a sensitive value (#20061)
• azurerm_service_fabric_managed_cluster - the resource_group_name field is now correctly marked as ForceNew (#20061)
• azurerm_spring_cloud_configuration_service - the field password is now correctly marked as a sensitive value (#20061)
• azurerm_spring_cloud_configuration_service - the field private_key is now correctly marked as a sensitive value (#20061)
• azurerm_static_site - the field api_key is now correctly marked as a sensitive value (#20061)
• azurerm_storage_account - will no longer silently ignore 404 error while reading service properties (#19062)
• azurerm_storage_account - the infrastructure_encryption_enabled is now supportted for premium accounts (#20028)
• azurerm_windows_web_app_slot - fixa bug where use_32_bit_worker would not be set correctly (#20051)

3.39.1 (January 13, 2023)

BUG FIXES:

• azurerm_cosmosdb_sql_container - fixproperty included_path can not be removed issue (#19998)
• azurerm_log_analytics - fixing crash during read (#20011)

3.39.0 (January 12, 2023)

BREAKING CHANGES:

• App Service App Stack Re-alignment - due to a number of changes in how the Service manages App and Stack settings, the Terraform resource schema and validation needs to be updated to re-align with the service. Whist we ordinarily avoid breaking changes outside a major release, the drift has made several aspects of these resources in an unworkable position resulting in a poor experience for many users (#19685)

• azurerm_windows_web_app

  • node_version Valid values are now ~12, ~14, ~16, and ~18. This is due to an underlying change to where the Service reads the Node value from in the API request.
  • dotnet_version valid values are now v2.0, v3.0, v4.0, v5.0, v6.0, and v7.0
  • New setting dotnet_core_version - Valid values are v4.0. This setting replaces the hybrid setting of core3.1 in dotnet_version since the removal of core3.1 from the supported versions.
  • tomcat_version - Configured the Web App to use Tomcat as the JWS at the specified version. See the official docs for supported versions. Examples include 10.0, and 10.0.20
  • java_embedded_server_enabled - configures the JWS to be the Embedded server at the version specified by java_version. Defaults to false. Note: One of java_embedded_server_enabled or tomcat_version is required when java_version is set.

• azurerm_windows_web_app_slot

  • node_version Valid values are now ~12, ~14, ~16, and ~18. This is due to an underlying change to where the Service reads the Node value from in the API request.
  • dotnet_version valid values are now v2.0, v3.0, v4.0, v5.0, v6.0, and v7.0
  • New setting dotnet_core_version - Valid values are v4.0. This setting replaces the hybrid setting of core3.1 in dotnet_version since the removal of core3.1 from the supported versions.
  • tomcat_version - Configured the Web App to use Tomcat as the JWS at the specified version. See the official docs for supported versions. Examples include 10.0, and 10.0.20
  • java_embedded_server_enabled - configures the JWS to be the Embedded server at the version specified by java_version. Defaults to false. Note: One of java_embedded_server_enabled or tomcat_version is required when java_version is set.

• azurerm_windows_function_app

  • dotnet_version - Valid values are now v3.0, v4.0, v6.0, and v7.0, defaulting to v4.0
  • java_version - Valid values are now 1.8, 11, and 17

• azurerm_windows_function_app_slot

  • dotnet_version - Valid values are now v3.0, v4.0, v6.0, and v7.0, defaulting to v4.0
  • java_version - Valid values are now 1.8, 11, and 17

• azurerm_linux_web_app

  • java_version - input validation has been introduced based on supported values within the service. Valid values are now: 8,11, and 17.

FEATURES:

• New Data Source: azurerm_private_dns_resolver (#19885)
• New Data Source: azurerm_private_dns_resolver_dns_forwarding_ruleset (#19941)
• New Data Source: azurerm_private_dns_resolver_forwarding_rule (#19947)
• New Data Source: azurerm_private_dns_resolver_inbound_endpoint (#19948)
• New Data Source: azurerm_private_dns_resolver_outbound_endpoint (#19950)
• New Data Source: azurerm_private_dns_resolver_virtual_network_link (#19951)
• New Resource: azurerm_application_insights_standard_web_test (#19954)
• New Resource: azurerm_cost_anomaly_alert (#19899)
• New Resource: azurerm_lab_service_lab (#19852)
• New Resource: azurerm_lab_service_user (#19957)
• New Resource: azurerm_network_manager_subscription_connection (#19617)
• New Resource: azurerm_network_manager_management_group_connection (#19621)
• New Resource: azurerm_media_services_account_filter (#19964)
• New Resource: azurerm_private_endpoint_application_security_group_association (#19825)
• New Resource: azurerm_sentinel_data_connector_threat_intelligence_taxii (#19209)
• New Resource: azurerm_storage_account_local_user (#19592)

ENHANCEMENTS:

• siterecovery: refactoring to use github.com/hashicorp/go-azure-sdk (#19571)
• siterecovery: updating to API version 2021-11-01 (#19571)
• Data Source: azurerm_shared_image - add support for the purchase_plan block (#19873)
• azurerm_kubernetes_cluster - add support for the vnet_integration_enabled and subnet_id properties (#19438)
• azurerm_log_analytics_data_export_rule - destination_resource_id accepts an Event Hub Namespace ID (#19868)
• azurerm_linux_web_app- support for the application_stack.go_version property (#19685)
• azurerm_linux_web_app_slot -support for the application_stack.go_version property (#19685)
• azurerm_logic_app_action_http - add support for @ in the body property (#19754)
• azurerm_maintenance_configuration - support for the in_guest_user_patch_mode and install_patches properties (#19865)
• azurerm_monitor_diagnostic_setting - deprecate log in favour of enabled_log (#19504)
• azurerm_media_services_account - support for the encryption and public_network_access_enabled properties (#19891)
• azurerm_mysql_flexible_server - support for the customer_managed_key properties (#19905)
• azurerm_sentinel_automation_rule - support for the triggers_on, triggers_when, and condition_json properties (#19309)
• azurerm_spring_cloud_gateway - support for the application_performance_monitoring_types, environment_variables, and sensitive_environment_variables properties (#19884)
• azurerm_storage_account - support for the allowed_copy_scope property (#19906)
• azurerm_storage_queue - exporting resource_manager_id (#19969)
• azurerm_synapse_spark_pool - add support for Spark 3.3 (#19866)
• azurerm_windows_web_app - the php_version property supported values now include: 7.1, 7.4, and Off. Note: 7.1 is currently deprecated. Off will configure the system to use the latest available to the App service image (#19685)
• azurerm_windows_web_app - the python_version property has been deprecated and is no longer used by the service (#19685)
• azurerm_windows_web_app - the python property supersedes python_version. Defaults to false. When true uses the latest Python version supported by the Windows App image (#19685)
• azurerm_windows_web_app - the java_container property has been deprecated in favour of tomcat_version and java_embedded_server_enabled (#19685)
• azurerm_windows_web_app - the java_container_version property This property has been deprecated in favour of tomcat_version and java_embedded_server_enabled (#19685)
• azurerm_windows_web_app - the current_stack property will now be computed if only one stack is configured on the Windows Web App. This will ensure the portal displays the appropriate metadata and configuration for this stack (#19685)
• azurerm_windows_web_app - Added input validation for interval values in the auto_heal block. These properties now enforce HH:MM:SS values up to 99:59:59 (#19685)
• azurerm_windows_web_app_slot - the php_version property supported values now include: 7.1, 7.4, and Off. Note: 7.1 is currently deprecated. Off will configure the system to use the latest available to the App service image (#19685)
• azurerm_windows_web_app_slot - the python_version property has been deprecated and is no longer used by the service (#19685)
• azurerm_windows_web_app_slot - the python property supersedes python_version. Defaults to false. When true uses the latest Python version supported by the Windows App image (#19685)
• azurerm_windows_web_app_slot - the java_container property has been deprecated in favour of tomcat_version and java_embedded_server_enabled (#19685)
• azurerm_windows_web_app_slot - the java_container_version property This property has been deprecated in favour of tomcat_version and java_embedded_server_enabled (#19685)
• azurerm_windows_web_app_slot - the current_stack property will now be computed if only one stack is configured on the Windows Web App. This will ensure the portal displays the appropriate metadata and configuration for this stack (#19685)
• azurerm_windows_web_app_slot - Added input validation for interval values in the auto_heal block. These properties now enforce HH:MM:SS values up to 99:59:59 (#19685)

BUG FIXES:

• azurerm_app_configuration_feature - handle updates correctly where the label ID is omitted (#19900)
• azurerm_cdn_frontdoor_rule - handle empty string value for query_string (#19927)
• azurerm_cosmosdb_account - default_identity_type is now computed to allow for restores (#19956)
• azurerm_linux_web_app- prevent a bug where backup_config could silently fail to expand resulting in the config not being sent (#19685)
• azurerm_linux_web_app- prevent a bug where health_check_eviction_time_in_min would not be correctly read back from the service (#19685)
• azurerm_linux_web_app_slot- prevent a bug where backup_config could silently fail to expand resulting in the config not being sent (#19685)
• azurerm_linux_web_app_slot- prevent a bug where health_check_eviction_time_in_min would not be correctly read back from the service (#19685)
• azurerm_policy_set_definition - fixupdate of for empty group names in policy_definition_reference.policy_group_names (#19890)
• azurerm_storage_account - 403 is now a valid status code for when permissions to list keys is missing (#19645)
• azurerm_storage_data_lake_gen2_path - ace generated by default are no longer stored in state to prevent perpetual state diffs (#18494)
• azurerm_storage_data_lake_gen2_filesystem - ace generated by default are no longer stored in state to prevent perpetual state diffs (#18494)
• azurerm_web_pubsub_hub - the event_handler property is now a list instead of set to respect the input order (#19886)
• azurerm_windows_web_app - prevent a bug where backup_config could silently fail to expand resulting in the config not being sent (#19685)
• azurerm_windows_web_app - prevent a bug where health_check_eviction_time_in_min would not be correctly set on Crete or Update (#19685)
• azurerm_windows_web_app_slot - prevent a bug where backup_config could silently fail to expand resulting in the config not being sent (#19685)
• azurerm_windows_web_app_slot - prevent a bug where health_check_eviction_time_in_min would not be correctly set on Crete or Update (#19685)

3.38.0 (January 05, 2023)

FEATURES:

• New Data Source: azurerm_marketplace_agreement (#19628)
• New Data Source: azurerm_network_manager_network_group (#19593)
• New Data Source: azurerm_virtual_hub_route_table (#19628)

ENHANCEMENTS:

• dependencies: updating to v0.20230105.1121404 of github.com/hashicorp/go-azure-sdk (#19872)
• dependencies: updating to v0.20221207.1110610 of github.com/tombuildsstuff/kermit (#19698)
• azurerm_dedicated_host - add support forLSv3-Type1 type (#19875)
• azurerm_proximity_placement_group - support for the allowed_vm_sizes and zone properties (#19675)

BUG FIXES:

• azurerm_automation_software_update_configuration - correctly handle empty expiry_time api values (#19774)
• azurerm_app_service_connection - polling until the resource is fully created, updated and deleted (#19792)
• azurerm_batch_pool - correctly handle the resource being deleted outside of terraform (#19780)
• azurerm_billing_account_cost_management_export - marking the resource as gone when it's no longer present in Azure (#19871)
• azurerm_bot_service_azure_bot - marking the resource as gone when it's no longer present in Azure (#19871)
• azurerm_databricks_access_connector - polling until the resource is fully created, updated and deleted (#19792)
• azurerm_databricks_access_connector - marking the resource as gone when it's no longer present in Azure (#19871)
• azurerm_datadog_monitor_sso_configuration - polling until the resource is fully created and deleted (#19792)
• azurerm_hdinsight_kafka_cluster - the kafka_management_node property has been deprecated and will be removed in v4.0 (#19423)
• azurerm_kubernetes_cluster - scale_down_mode of the default node pool can now be updated without rebuilding the entire cluster (#19823)
• azurerm_orbital_contact_profile - polling until the resource is fully created, updated and deleted (#19792)
• azurerm_orbital_spacecraft - polling until the resource is fully created, updated and deleted (#19792)
• azurerm_postgresql_flexible_server - correctly handle password authentication (#19800)
• azurerm_resource_group_cost_management_export - marking the resource as gone when it's no longer present in Azure (#19871)
• azurerm_spring_cloud_connection - polling until the resource is fully updated and deleted (#19792)
• azurerm_stack_hci_cluster - polling until the resource is fully deleted (#19792)
• azurerm_stream_analytics_cluster - polling until the resource is fully deleted (#19792)
• azurerm_stream_analytics_reference_input_blob - the storage_account_key property is now optional when MSI auth is used (#19676)
• azurerm_storage_account_network_rules - the requires import check no longer checks the bypass field to workaround an issue within the Azure API (#19719)
• azurerm_subscription_cost_management_export - marking the resource as gone when it's no longer present in Azure (#19871)
• azurerm_synapse_linked_service - report error during create/update (#19849)
• azurerm_virtual_desktop_application_group - changing the host_pool_id now creates a new resource (#19689)
• azurerm_vmware_express_route_authorization - marking the resource as gone when it's no longer present in Azure (#19871)

3.37.0 (December 21, 2022)

FEATURES:

• New Resource: azurerm_cognitive_deployment (#19526)
• New Resource: azurerm_billing_account_cost_management_export (#19723)
• New resource: azurerm_key_vault_certificate_contacts (#19743)
• New Resource: azurerm_lab_service_plan (#19312)
• New Resource: azurerm_resource_deployment_script (#19436)
• New Resource: azurerm_spring_cloud_customized_accelerator (#19736)

ENHANCEMENTS:

• azurerm_netapp_volume - support for the zone property (#19669)

BUG FIXES:

• azurerm_app_configuration_key - fixa regression when handling IDs containing a : (#19722)
• azurerm_virtual_network_gateway_connection - can now be created with a azurerm_virtual_network_gateway in another resource group (#19699)

3.36.0 (December 15, 2022)

FEATURES:

• New Resource: azurerm_virtual_machine_packet_capture (#19385)
• New Resource: azurerm_virtual_machine_scale_set_packet_capture (#19385)
• New Resource: azurerm_spring_cloud_accelerator (#19572)
• New Resource: azurerm_spring_cloud_dev_tool_portal (#19568)
• New Resource: azurerm_route_map (#19402)
• New Data Source: azurerm_lb_outbound_rule (#19345)

ENHANCEMENTS:

• healthbot: refactoring to use github.com/hashicorp/go-azure-sdk (#19433)
• media: updating to API version 2021-11-01 and 2022-08-01 (#19623)
• azurerm_cosmosdb_account - support for updating some capabilities (#14991)
• azurerm_key_vault_managed_hardware_security_module - support for the public_network_access_enabled and network_acls properties (#19640)
• azurerm_kubernetes_cluster - support for the monitor_metrics block (#19530)
• azurerm_kubernetes_cluster - the ssh_key property can now be updated (#19634)
• azurerm_kubernetes_cluster_node_pool - support for the outbound_nat_enabled property (#19663)
• azurerm_lighthouse_definition - support for the eligible_authorization property (#19569)
• azurerm_log_analytics_workspace - support for the allow_resource_only_permissions property (#19346)
• azurerm_private_endpoint - support for the member_name property in the ip_configuration block and support for multiple ip_configuration blocks (#19389)
• azurerm_storage_account - support for the blob_properties.restore_policy property (#19644)
• azurerm_vpn_gateway_connection - support for the inbound_route_map_id and outbound_route_map_id properties (#19681)
• azurerm_point_to_site_vpn_gateway - support for the routing_preference_internet_enabled, inbound_route_map_id, and outbound_route_map_id properties (#19672)
• azurerm_web_application_firewall_policy - support the rule property in the rule_group_override block (#19497)

BUG FIXES:

• Data Source: azurerm_api_management - prevent failure when retrieving tenant access properties when permissions are missing (#19626)
• azurerm_cdn_frontdoor_firewall_policy - allow Log as a valid value for managed rule override action in DRS 2.0 and above (#19637)
• azurerm_cosmosdb_account - enabling analytical_storage_enabled no longer forces recreation (#19659)
• azurerm_monitor_scheduled_query_rules_alert_v2 - use the correct alue Equals for operator (#19594)
• azurerm_mssql_database - the threat_detection_policy.storage_* properties can now be correctly set as empty (#19670)
• azurerm_synapse_linked_service - add validation for type (#19636)
• azurerm_resource_policy_exemption - changing the policy_assignment_id property not created a new resource (#19674)
• azurerm_resource_group_policy_exemption - changing the policy_assignment_id property not created a new resource (#19674)
• azurerm_subscription_policy_exemption - changing the policy_assignment_id property not created a new resource (#19674)
• azurerm_stream_analytics_output_mssql - the user and password properties are not optional when using MSI authentication (#19696)

3.35.0 (December 09, 2022)

BREAKING CHANGES:

• azurerm_stream_analytics_output_blob - the field batch_min_rows is now an integer rather than a float due to a breaking change in the API Specifications - we believe this was only previously valid as an integer, as such whilst this is a breaking change we believe this shouldn't cause an issue for most users (since the API required that this was an integer) (#19602)

FEATURES:

• New Resource: azurerm_digital_twins_time_series_database_connection (#19576)
• New Resource: azurerm_network_manager (#19334)
• New Resource: azurerm_spring_cloud_application_live_view (#19495)
• New Resource: azurerm_sentinel_data_connector_microsoft_threat_protection (#19162)
• New Resource: azurerm_vmware_netapp_volume_attachment (#19082)

ENHANCEMENTS:

• dependencies: updating to v0.20221207.1121859 of github.com/hashicorp/go-azure-sdk (#19602)
• lighthouse: updating to API version 2022-10-01 (#19499)
• proximityplacementgroups: updating to API Version 2022-03-01 (#19537)
• Data Source: azurerm_kubernetes_cluster - support for the storage_profile block (#19396)
• azurerm_firewall_policy - support for the explicit_proxy block and auto_learn_private_ranges_mode property (#19313)
• azurerm_kubernetes_cluster - support for the custom_ca_trust_enabled property (#19546)
• azurerm_kubernetes_cluster - support for the storage_profile block (#19396)
• azurerm_kubernetes_cluster - support for the image_cleaner block (#19368)
• azurerm_kubernetes_cluster - support for the network_plugin_mode and ebpf_data_plane properties (#19527)
• azurerm_kubernetes_cluster_node_pool - support for the custom_ca_trust_enabled property (#19546)
• azurerm_lb_probe - support for the probe_threshold property (#19573)
• azurerm_mssql_virtual_machine - support for the days_of_week property (#19553)
• azurerm_spring_cloud_gateway_route_config - support for the filters, predicates, and sso_validation_enabled properties (#19493)

BUG FIXES:

• Data Source: azurerm_sentinel_alert_rule_template: Set custom ID rather than using ID returned from API (#19580)
• azurerm_app_service_connection - correctly pass the secret to the service (#19519)
• azurerm_automation_software_update_configuration - fixissue where omitting tagsand tag_filter result in an error (#19516)
• azurerm_automation_source_control - a state migration to work around the previously incorrect id casing (#19506)
• azurerm_automation_webhook - a state migration to work around the previously incorrect id casing (#19506)
• azurerm_container_registry_webhook - added a state migration to work around the previously incorrect id casing (#19507)
• azurerm_frontdoor_rules_engine - a state migration to work around the previously incorrect id casing (#19512)
• azurerm_healthcare_* - added a state migration to work around the previously incorrect id casing (#19511)
• azurerm_iothub_* - added a state migration to work around the previously incorrect id casing (#19524)
• azurerm_key_vault - allow for keyvaults in two different subscriptions (#19531)
• azurerm_key_vault_certificate - skip purging during deletion if the parent key vault has purge protection enabled (#19528)
• azurerm_key_vault_key - skip purging during deletion if the parent key vault has purge protection enabled (#19528)
• azurerm_key_vault_managed_hardware_security_module - skip purging during deletion if the parent key vault has purge protection enabled (#19528)
• azurerm_key_vault_secret - skip purging during deletion if the parent key vault has purge protection enabled (#19528)
• azurerm_lb - adding/removing a frontend configuration will no longer force recreation a new resource to be created (#19548)
• azurerm_kusto_* - added a state migration to work around the previously incorrect id casing (#19525)
• azurerm_media_services_account - fixing an issue in the state upgrade where the Resource ID was being parsed incorrectly (#19578)
• azurerm_mssql_elasticpool - Prevent license_type from being configured in specific scenarios (#19586)
• azurerm_monitor_smart_detector_alert_rule - added a state migration to work around the previously incorrect id casing (#19513)
• azurerm_spring_cloud_* - added a state migration to work around the previously incorrect id casing (#19564)
• azurerm_stream_analytics_output_blob - the field batch_min_rows is now an integer rather than a float due to a breaking change in the API Specifications - we believe this was only previously valid as an integer, as such whilst this is a breaking change we believe this shouldn't cause an issue for most users (since the API required that this was an integer) (#19602)
• azurerm_virtual_desktop_workspace_application_group_association - set tags properly (#19574)

3.34.0 (December 01, 2022)

ENHANCEMENTS:

• dependencies: updating to v0.20221129.1175354 of github.com/hashicorp/go-azure-sdk (#19483)
• media: refactoring to use github.com/hashicorp/go-azure-sdk (#19285)
• springcloud: updating to use API Version 2022-11-01-preview (#19445)
• streamanalytics: refactoring to use github.com/hashicorp/go-azure-sdk (#19395)
• synapse: refactoring to use github.com/tombuildstuff/kermit rather than the embedded sdk (#19484)
• Data Source: azurerm_api_management - support for tenant_access property (#19422)
• azurerm_kusto_database - supports underscores in the name (#19466)
• azurerm_managed_disk - support for upload_size_bytes property (#19458)
• azurerm_monitor_activity_log_alert - action is now supplied as a list instead of a set (#19425)
• azurerm_spring_cloud_gateway_route_config - support for protocol property (#19382)
• azurerm_storage_account - support for sftp_enabled (#19428)
• azurerm_storage_management_policy - tier_to_cool_after_days_since_creation_greater_than - support for the tier_to_cool_after_days_since_creation_greater_than, tier_to_archive_after_days_since_creation_greater_than, delete_after_days_since_creation_greater_than properties (#19446)

BUG FIXES:

• data.azurerm_sentinel_alert_rule_template - a state migration to work around the previously incorrect id casing (#19487)
• azurerm_app_configuration_key - prevent crash when retrieving the key value (#19464)
• azurerm_data_factory_linked_service_azure_file_storage - send host and and user_id in the payload only when it's been set (#19468)
• azurerm_eventgrid_topic - fixsetting of fields in input_mapping_fields during read (#19494)
• azurerm_iot_security_solution - a state migration to work around the previously incorrect id casing (#19489)
• azurerm_monitor_autoscale_setting - a state migration to work around the previously incorrect id casing (#19492)
• azurerm_sentinel_automation_rule - a state migration to work around the previously incorrect id casing (#19487)
• azurerm_sql_active_directory_administrator - a state migration to work around the previously incorrect id casing (#19486)
• azurerm_stream_analytics_output_eventhub - shared_access_policy_key and shared_access_policy_name are now optional (#19447)
• azurerm_synapse_integration_runtime_azure - a state migration to work around the previously incorrect id casing (#19485)
• azurerm_synapse_integration_runtime_self_hosted - a state migration to work around the previously incorrect id casing (#19485)
• azurerm_synapse_linked_service - a state migration to work around the previously incorrect id casing (#19477)
• azurerm_windows_web_app - fixcurrentStack is being reset when other site_config values are changed. (#18568)
• azurerm_windows_web_app_slot - fixcurrentStack is being reset when other site_config values are changed. (#18568)
• azurerm_windows_virtual_machine_scale_set Fix crash when upgrading automatic_os_upgrade_policy (#19465)

3.33.0 (November 24, 2022)

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_custom_domain (#19357)
• New Resource: azurerm_mssql_managed_instance_transparent_data_encryption (#18918)
• New Resource: azurerm_postgresql_flexible_server_active_directory_administrator (#19269)

ENHANCEMENTS:

• build: updating to use Go 1.19.3 (#19362)
• dependencies: updating to v0.20221122.1115312 of github.com/hashicorp/go-azure-sdk (#19412)
• dependencies: upgrading to v2.24.1 of github.com/hashicorp/terraform-plugin-sdk (#19303)
• cognitive: updating to API Version 2022-10-01 (#19344)
• springcloud: updating to API Version 2022-09-01-preview (#19340)
• Data Source: azurerm_mssql_managed_instance - support for customer_managed_key_id attribute and user-assigned identity (#18918)
• azurerm_cognitive_account - support for dynamic_throttling_enabled (#19371)
• azurerm_databricks_workspace - support for storage_account_identity property in datasource (#19336)
• azurerm_mssql_managed_instance - support for user-assigned identity (#18918)
• azurerm_postgresql_flexible_server - support for authentication (#19269)
• azurerm_spring_cloud_app - support for the ingress_settings block (#19386)

BUG FIXES:

• azurerm_application_insights - validating/normalizing the workspace_id as a Workspace ID (#19325)
• azurerm_cdn_frontdoor_rule - allow cache_duration to be null if cache_behavior is set to HonorOrigin (#19378)
• azurerm_monitor_alert_processing_rule_action_group - condition.x.monitor_condition can be correctly specified alone (#19338)
• azurerm_monitor_alert_processing_rule_suppression - condition.x.monitor_condition can be correctly specified alone (#19338)
• azurerm_mysql_flexible_server - increase validation max value for the iops property (#19419)
• azurerm_servicebus_subscription_rule - correlation_filter with empty attributes no longer crashes (#19352)
• azurerm_storage_account - fix crash in multichannel checking (#19298)
• azurerm_storage_account - prevent both blob_properties.0.versioning_enabled and is_hns_enabled being set to true (#19418)

3.32.0 (November 17, 2022)

DEPRECATIONS

• The azurerm_integration_service_environment resource is now deprecated as the underlying Azure Service is being retired on 2024-08-31 and new instances cannot be provisioned (by default) after 2022-11-01 (#19265)

ENHANCEMENTS:

• dependencies: updating to v0.20221116.1175352 of github.com/hashicorp/go-azure-sdk (#19319)
• azurerm_security_center_subscription_pricing - support for the subplan property (#19273)
• azurerm_storage_account - support for the sas_policy block (#19222)
• azurerm_windows_web_app, azurerm_windows_web_app_slot - aupport for 17 value for java_version property (#19249)
• azurerm_storage_blob_inventory_policy - support for include_deleted property (#19286)

BUG FIXES:

• azurerm_app_service_public_certificate - add custom poller to prevent Root resource was present, but now absent. result (#19348)
• azurerm_eventhub_namespace - correct zone_redundant property (#19164)
• azurerm_orchestrated_virtual_machine_scale_set - allow no image to be specified (#19263)
• azurerm_synapse_firewall_rule - wait for the firewall to be ready (#19227)
• azurerm_service_fabric_managed_cluster - correctly define active_directory as a List (#19163)
• azurerm_orchestrated_virtual_machine_scale_set - instance parameter is now set on update (#19337)

3.31.0 (November 10, 2022)

FEATURES:

• New Resource: azurerm_federated_identity_credential (#19199)
• New Resource: azurerm_stream_analytics_stream_input_eventhub_v2 (#19150)

ENHANCEMENTS

• dependencies: updating to v0.20221108.1145701 of github.com/hashicorp/go-azure-sdk (#19193)
• dependencies: updating network to API Version 2022-05-01 (#19124)
• dependencies: updating sentinel to API Version 2022-10-01-preview (#19161)
• azurerm_disk_encryption_set - support for the federated_client_id property (#19184)
• azurerm_linux_web_app - support for .NET 7 (#19232)
• azurerm_linux_function_app - support for .NET 7 (#19232)
• azurerm_managed_disk - support for expanding data disks without downtime (#17245)
• azurerm_mssql_virtual_machine - support for the sql_instance block (#19123)
• azurerm_public_ip - support for the ddos_protection_mode and ddos_protection_plan_id properties (#19206)
• azurerm_sentinel_alert_rule_nrt - support for the techniques property (#19142)
• azurerm_sentinel_alert_rule_fusion - support for the source block (#19093)
• azurerm_windows_web_app - support for .NET 7 (#19232)
• azurerm_windows_function_app - support for .NET 7 (#19232)

BUG FIXES:

• azurerm_cdn_frontdoor_route - update read function to parse cdn_frontdoor_origin_group_id insensitively (#19178)
• azurerm_cdn_frontdoor_rule - update url_redirect_action to allow query_string field to pass multiple query string parameters (#19180)
• azurerm_cdn_frontdoor_profile - the response_timeout_seconds property is no longer force new (#19175)

3.30.0 (November 03, 2022)

FEATURES:

• New Resource: azurerm_kubernetes_fleet_manager (#19111)
• New Resource: azurerm_mssql_server_microsoft_support_auditing_policy (#18609)
• New Resource: azurerm_private_dns_resolver_virtual_network_link (#19029)
• New Resource: azurerm_private_dns_resolver_forwarding_rule (#19028)

ENHANCEMENTS

• dependencies: iothub updating to 2022-04-30-preview (#19070)
• dependencies: updating to v0.47.0 of github.com/hashicorp/go-azure-helpers (#19107)
• dependencies: updating to v0.20221102.1171058 of github.com/hashicorp/go-azure-sdk (#19108)
• webpubsub: refactoring to use github.com/hashicorp/go-azure-sdk (#18892)
• Data Source: azurerm_application_gateway - export the backend_address_pool block (#19026)
• Data Source: azurerm_function_app_host_keys - export webpubsub_extension_key property (#19073)
• azurerm_iothub - support for DigitalTwinChangeEvents as source and fallback_route.source (#19070)
• azurerm_iothub_fallback_route - support for DigitalTwinChangeEvents as source (#19070)
• azurerm_iothub_route - support for DigitalTwinChangeEvents as source (#19070)
• azurerm_kubernetes_cluster - support for the web_app_routing block (#18667)
• azurerm_linux_virtual_machine_scale_set - support for the protected_settings_from_key_vault blovk (#19098)
• azurerm_linux_virtual_machine_scale_set - support for StandardSSD_ZRS, PremiumV2_LRS, and Premium_ZRS storage account types (#19091)
• azurerm_mssql_virtual_machine - support for the system_db_on_data_disk_enabled property (#19115)
• azurerm_monitor_diagnostic_setting - support for the partner_solution_id property (#19114)
• azurerm_policy_definition - reverse the order of policies lookup to favour builtin (#18338)
• azurerm_policy_set_definition - reverse the order of policies lookup to favour builtin (#18338)
• azurerm_security_center_contact - support for the name property (#18999)
• azurerm_stream_analytics_job - support for the job_storage_account block (#19120)
• azurerm_virtual_machine_extension - support for the protected_settings_from_key_vault blovk (#19098)
• azurerm_virtual_machine_scale_set_extension - support for the protected_settings_from_key_vault blovk (#19098)
• azurerm_windows_virtual_machine_scale_set - support for the protected_settings_from_key_vault blovk (#19098)
• azurerm_windows_virtual_machine_scale_set - support for StandardSSD_ZRS, PremiumV2_LRS, and Premium_ZRS storage account types (#19091)

BUG FIXES:

• Data Source: azurerm_app_configuration_keys - fixa crash when label is not set (#19032)
• azurerm_api_management - correct the api return subnet_id with the wrong case (#18988)
• azurerm_cdn_frontdoor_firewall_policy - expose AnomalyScoring in override rule action for DRS 2.0 (#19095)
• azurerm_eventhub_namespace_disaster_recovery_config - will now correctly break the pairing (#19030)
• azurerm_kubernetes_cluster - set a valid default value for auto_scaler_profile.expander (#19057)
• azurerm_linux_virtual_machine_scale_set - can now set automatic_os_upgrade_policy with rolling upgrades enables (#18605)
• azurerm_mssql_database - handle the license_type property no longer being returned by API (#19084)
• azurerm_postgresql_flexible_server_database - is now correctly removed from state on deletion (#19081)
• azurerm_virtual_network_gateway_connection - correctly set authorization_key from state as the API returnes *s (#19071)
• azurerm_windows_virtual_machine_scale_set - can now set automatic_os_upgrade_policy with rolling upgrades enables (#18605)

3.29.1 (October 28, 2022)

BUG FIXES:

• azurerm_kubernetes_cluster - prevent panic when setting public_network_access_enabled (#19048)

3.29.0 (October 27, 2022)

FEATURES:

• New Data Source: azurerm_api_management_gateway_host_name_configuration (#17166)
• New Data Source: azurerm_cdn_frontdoor_firewall_policy (#18903)
• New Resource: azurerm_datadog_monitor_tag_rule (#17825)
• New Resource: azurerm_datadog_monitor_sso_configuration (#17825)
• New Resource: azurerm_iothub_device_update_account (#18789)
• New Resource: azurerm_iothub_device_update_instance (#18789)
• New Resource: azurerm_nginx_configuration (#18761)
• New Resource: azurerm_nginx_certificate (#18762)
• New Resource: azurerm_private_dns_resolver (#18473)
• New Resource: azurerm_private_dns_resolver_dns_forwarding_ruleset (#19012)
• New Resource: azurerm_private_dns_resolver_inbound_endpoint (#18983)
• New Resource: azurerm_private_dns_resolver_outbound_endpoint (#18986)

ENHANCEMENTS:

• Dependencies compute - updating to 2022-08-01 (#18994)
• Dependencies containerinstance - updating to 2021-10-01 (#17785)
• Dependencies: update go-azure-helpers to v0.45.0 (#18968)
• containerservice: refactoring to use github.com/hashicorp/go-azure-sdk (#18705)
• customproviders - refactoring to use github.com/hashicorp/go-azure-sdk (#18978)
• snapshot - refactoring to use github.com/hashicorp/go-azure-sdk (#18957)
• disks: refactoring to use github.com/hashicorp/go-azure-sdk (#18928)
• Data Source: azurerm_storage_management_policy - add support for tier_to_archive_after_days_since_last_tier_change_greater_than (#18898)
• azurerm_container_group - the network_profile_id property hasbeen deprecated in favour of subnet_ids as the newer versions of the API no longer support it (#17785)
• azurerm_cdn_frontdoor_rule - allow the cdn_frontdoor_origin_group_id field to be optional in the route_configuration_override_action (#18906)
• azurerm_cdn_frontdoor_rule - expose Disabled as a possible value of cache_behavior in the route_configuration_override_action (#18906)
• azurerm_disk_encryption_set - support for identities UserAssigned and SystemAssigned,UserAssgined (#18525)
• azurerm_hdinsight_kafka_cluster - support for the compute_isolation block (#17449)
• azurerm_hdinsight_spark_cluster - support for the compute_isolation block (#17449)
• azurerm_hdinsight_interactive_query_cluster - support for the compute_isolation block (#17449)
• azurerm_hdinsight_hbase_cluster - support for the compute_isolation block (#17449)
• azurerm_hdinsight_hadoop_cluster - support for the compute_isolation block (#17449)
• azurerm_container_group - support for the dns_name_label_reuse_policy block (#17785)
• azurerm_kubernetes_cluster - support for the workload_autoscaler_profile block (#18967)
• azurerm_linux_function_app - support for using storage_account external Azure Storage Account configurations (#18760)
• azurerm_linux_function_app - support for Java 17 (#18689)
• azurerm_linux_function_app_slot - support for using storage_account external Azure Storage Account configurations (#18760)
• azurerm_logic_app_action_http - support for the queries property (#18934)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add evaluation_frequency, window_duration, mute_actions_after_alert_duration, and query_time_range_overridevalidation (#18960)
• azurerm_mssql_virtual_machine - =support for the assessment block (#18923)
• azurerm_mssql_server_transparent_data_encryption - support for autorotation of keyvault keys (#18523)
• azurerm_logic_app_standard - support for the scm_ip_restriction block and the scm_use_main_ip_restriction, scm_min_tls_version, scm_type properties (#18853)
• azurerm_postgresql_server - can now set public_network_access_enabled during creation when point in time restore is used (#18962)
• azurerm_servicebus_namespace_disaster_recovery_config - support the alias_authorization_rule_id property (#18729)
• azurerm_synapse_workspace - sql_administrator_login and sql_administrator_login_password are now no longer required for the creation of this resource (#18850)
• azurerm_synapse_workspace - enable user assigned managed identity (#19007)
• azurerm_windows_function_app - support for using storage_account external Azure Storage Account configurations (#18760)
• azurerm_windows_function_app - support for Java 17 (#18689)
• azurerm_windows_function_app_slot - support for using storage_account external Azure Storage Account configurations (#18760)

BUG FIXES:

• provider: will no loner automatically register the Microsoft.StoragePool provider as Azure has halted the preview of Azure Disk Pools, and it will not be made generally available (#18905)
• azurerm_app_configuration_keys - will now correctly retrieve result if more than 100 entries are returned (#19020)
• azurerm_data_factory_dataset_parquet - azure_blob_storage_location.path and http_server_location.path are now Optional (#19009)
• azurerm_disk_pool - has been deprecated as Azure has halted the preview of Azure Disk Pools, and it will not be made generally available (#18905)
• azurerm_disk_pool_iscsi_target - has been deprecated as Azure has halted the preview of Azure Disk Pools, and it will not be made generally available (#18905)
• azurerm_disk_pool_iscsi_target_lun - has been deprecated as Azure has halted the preview of Azure Disk Pools, and it will not be made generally available (#18905)
• azurerm_disk_pool_managed_disk_attachment - has been deprecated as Azure has halted the preview of Azure Disk Pools, and it will not be made generally available (#18905)
• azurerm_linux_virtual_machine_scale_set - the gallery_applications block has been renamted to gallery_application (#19014)
• azurerm_managed_disk - logical_sector_size, disk_iops_read_write, disk_mbps_read_write, disk_iops_read_only and disk_mbps_read_only can be set when storage_account_type is PremiumV2_LRS (#18991)
• azurerm_monitor_data_collection_rule - correctly support streams (#18966)
• azurerm_netapp_volume - correctly set snapshot ID when create_from_snapshot_resource_id is specified (#18996)
• azurerm_key_vault_certificate - new versions of key vault certs can now be imported (#18848)
• azurerm_postgresql_server - correctly create replicas when CMK is enabled (#18805)
• azurerm_stream_analytics_stream_input_eventhub - shared_access_policy_key and shared_access_policy_name are no longer required (#18959)
• azurerm_windows_virtual_machine_scale_set - the gallery_applications block has been renamted to gallery_application (#19014)

3.28.0 (October 20, 2022)

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_secret (#18817)
• New Resource: azurerm_databricks_access_connector (#18709)
• New Resource: azurerm_sentinel_data_connector_dynamics_365 (#18859)
• New Resource: azurerm_sentinel_data_connector_iot (#18862)
• New Resource: azurerm_sentinel_data_connector_office_365_project (#18858)
• New Resource: azurerm_sentinel_data_connector_office_irm (#18856)
• New Resource: azurerm_sentinel_data_connector_office_power_bi (#18857)

ENHANCEMENTS:

• dependencies: updating to v0.20221018.1075906 of github.com/hashicorp/go-azure-sdk (#18833)
• azurestackhci: updating to API Version 2022-09-01 (#18759)
• Data Source: azurerm_linux_function_app - add support for client_certificate_exclusion_paths (#16603)
• Data Source: azurerm_linux_web_app - add support for client_certificate_exclusion_paths (#16603)
• Data Source: azurerm_windows_function_app - add support for client_certificate_exclusion_paths (#16603)
• Data Source: azurerm_windows_web_app - add support for client_certificate_exclusion_paths (#16603)
• azurerm_cdn_frontdoor_firewall_policy - managed rules can now exclude matches on RequestBodyJsonArgNames (#18874)
• azurerm_cosmosdb_account - support for the primary_sql_connection_string, secondary_sql_connection_string, primary_readonly_sql_connection_string, and secondary_readonly_sql_connection_string attributes (#17810)
• azurerm_fluid_relay_server - support for the service_endpoint property (#18763)
• azurerm_fluid_relay_server - support for the primary_key and secondary_key properties (#18765)
• azurerm_linux_function_app - correctly set use_32_bit_worker during Create (#18680)
• azurerm_linux_function_app - add support for the client_certificate_exclusion_paths property (#16603)
• azurerm_linux_function_app - add VS2022 to remote_debugging_version valid values (#18684)
• azurerm_linux_function_app_slot - add support for the client_certificate_exclusion_paths property (#16603)
• azurerm_linux_web_app - add support for the client_certificate_exclusion_paths property(#16603)
• azurerm_linux_web_app_slot - add support for the client_certificate_exclusion_paths property (#16603)
• azurerm_storage_account - support for the immutability_policy block (#18774)
• azurerm_storage_account - customer managed keys can be now enabled when account_tier is set to Premium (#18872)
• azurerm_storage_management_policy - support for the tier_to_archive_after_days_since_last_tier_change_greater_than property (#18792)
• azurerm_subnet - add support for Microsoft.LabServices/labplans (#18822)
• azurerm_windows_virtual_machine_scale_set - allow disabling secure boot when creating a virtual machine scale set with disk encryption type VMGuestStateOnly (#18749)
• azurerm_windows_function_app - correctly set use_32_bit_worker during Create (#18680)
• azurerm_windows_function_app - add support for the client_certificate_exclusion_paths property (#16603)
• azurerm_windows_function_app - add VS2022 to remote_debugging_version valid values (#18684)
• azurerm_windows_function_app_slot - add support for the client_certificate_exclusion_paths correctly (#16603)
• azurerm_windows_web_app - add support for the client_certificate_exclusion_paths correctly (#16603)
• azurerm_windows_web_app_slot - add support for the client_certificate_exclusion_paths correctly (#16603)

BUG FIXES:

• azurerm_automation_software_update_configuration - parse subscription IDs correctly when set in scope (#18860)
• azurerum_cdn_frontdoor_route - fixa panic on import (#18824)
• azurerm_eventhub_namespace - ignore case for network_rulesets.x.virtual_network_rule.x.subnet_id (#18818)
• azurerm_firewall_policy_rule_collection_group - limit the number of destination ports in a NAT rule to one (#18766)
• Data Source: azurerm_linux_function_app - fixmissing error on data source not found (#18876)
• azurerm_linux_function_app - fixan issue where app_settings would show a diff when setting vnet_route_all_enabled to true (#18836)
• azurerm_linux_function_app_slot - fixan issue where app_settings would show a diff when setting vnet_route_all_enabled to true (#18836)
• azurerm_linux_virtual_machine - allow disabling secure boot when creating a virtual machine with disk encryption type VMGuestStateOnly (#18749)
• azurerm_linux_virtual_machine_scale_set - allow disabling secure boot when creating a virtual machine scale set with disk encryption type VMGuestStateOnly (#18749)
• azurerm_network_security_group - correct the casing of the protocol property (#18799)
• azurerm_network_security_rule - correct the casing of the protocol property (#18799)
• azurerm_recovery_services_vault - fixissue where soft_delete_enabled is reset to the default value when the identity block is updated (#18871)
• azurerm_windows_virtual_machine - allow disabling secure boot when creating a virtual machine with disk encryption type VMGuestStateOnly (#18749)
• azurerm_windows_function_app - fixan issue where app_settings would show a diff when setting vnet_route_all_enabled to true (#18836)
• azurerm_windows_function_app_slot - fixan issue where app_settings would show a diff when setting vnet_route_all_enabled to true (#18836)
• azurerm_windows_web_app - fixparsing of docker_container_name and docker_container_registry on read (#18251)

3.27.0 (October 13, 2022)

BREAKING CHANGES:

• azurerm_cdn_frontdoor_custom_domain - removed the associate_with_cdn_frontdoor_route_id field to allow for a custom domain to be associated with multiple routes. (#18600)

FEATURES:

• New DataSource: data.azurerm_cosmosdb_sql_role_definition (#18728)
• New DataSource: data.azurerm_cosmosdb_sql_database (#18728)
• New Resource: azurerm_cdn_frontdoor_custom_domain_association (#18600)
• New Resource: azurerm_nginx_deployment (#18510)
• New Resource: azurerm_orbital_contact_profile (#18317)
• New Resource: azurerm_sentinel_data_connector_office_atp (#18708)

ENHANCEMENTS:

• dependencies: updating to version v0.44. of github.com/hashicorp/go-azure-helpers (#18716)
• dependencies: updating to version v0.50.0 of github.com/manicminer/hamilton (#18716)
• azurerm_automation_runbook - support for the draft block and log_activity_trace propertry (#17961)
• azurerm_app_configuration - support for the encrption, local_auth_enabled, public_network_access_enabled, purge_protection_enabled, and soft_delete_retention_days properties (#17714)
• azurerm_api_management_api - support for the contact and license blocks (#18472)
• azurerm_cdn_frontdoor_route - exposed cdn_frontdoor_custom_domain_ids and link_to_default_domain (#18600)
• azurerm_data_factory_integration_runtime_azure_ssis - support for elastic_pool_namr property (#18696)
• azurerm_dedicated_hardware_security_module - support the management_network_profile block (#18702)
• azurerm_hdinsight_hadoop_cluster, - support for the script_actions block (#18670)
• azurerm_hdinsight_hbase_cluster, - support for the script_actions block (#18670)
• azurerm_hdinsight_interactive_query_cluster, - support for the script_actions block (#18670)
• azurerm_spark_cluster - support for the script_actions block (#18670)
• azurerm_kubernetes_cluster - support the workload_identity_enabled property (#18742)
• azurerm_firewall_policy_rule_collection_group- add Mssql as an option for type validation (#18746)
• azurerm_log_analytics_cluster - ensuring that the identity block is always set (#18700)
• azurerm_linux_web_app - support for python 3.10 (#18744)
• azurerm_linux_web_app_slot - support for python 3.10 (#18744)
• azurerm_mssql_database - support for the import block (#18588)
• azurerm_stream_analytics_output_servicebus_queue - support for the authentication_mode property (#18491)

BUG FIXES:

• azurerm_kubernetes_cluster - orchestrator_version is set properly for clusters created with an older API version (#18130)
• azurerm_kubernetes_cluster_node_pool - orchestrator_version is set properly for node pools created with an older API version (#18130)
• azurerm_log_analytics_cluster - fixing an issue when checking for the presence of an existing Log Analytics Cluster (#18700)
• azurerm_logic_app_workflow - can now be updated when associated with integration_service_environment_id (#18660)
• azurerm_spring_cloud_connection - correctly parse storage blob resource id (#18699)
• azurerm_app_service_connection - correctly parse storage blob resource id (#18699)

3.26.0 (October 06, 2022)

BREAKING CHANGES:

• azurerm_load_test - the computed attribute dataplane_uri has been renamed to data_plane_uri for consistency (#18654)

FEATURES:

• New Resource: azurerm_iotcentral_application_network_rule_set (#18589)

ENHANCEMENTS:

• dependencies: updating to v0.43.0 of github.com/hashicorp/go-azure-helpers (#18630)
• dependencies: updating to v0.20221004.1155444 of github.com/hashicorp/go-azure-sdk (#18628)
• provider: support for auto-registering SDK Clients and Services (#18629)
• azurerm_batch_pool - support for the node_deallocation_method, dynamic_vnet_assignment_scope, and source_port_ranges properties (#18436)
• azurerm_kubernetes_cluster - support for pod_cidrs and service_cidrs properties (#16657)
• azurerm_kubernetes_cluster - support for message_of_the_day, managed_outbound_ipv6_count, scale_down_mode and workload_runtime properties (#16741)
• azurerm_kubernetes_cluster_node_pool - support for message_of_the_day, scale_down_mode and workload_runtime properties (#16741)
• azurerm_load_test - switching to an auto-generated resource (#18654)
• azurerm_load_test - the computed attribute dataplane_uri has been renamed to data_plane_uri for consistency (#18654)
• azurerm_load_test - support for the description field (#18654)
• azurerm_user_assigned_identity - switching to an auto-generated resource (#18654)

BUG FIXES:

• azurerm_linux_function_app_slot - read app settings from the correct endpoint (#18396)
• azurerm_load_test - changing the name field now forces a new resource to be created (#18654)
• azurerm_windows_function_app_slot - read app settings from the correct endpoint (#18396)

3.25.0 (September 29, 2022)

FEATURES:

• New Resource: azurerm_cdn_frontdoor_route (#18231)
• New Resource: azurerm_cdn_frontdoor_custom_domain (#18231)
• New Resource: azurerm_cdn_route_disable_link_to_default_domain (#18231)

ENHANCEMENTS:

• dependencies: machinelearning - updating to use 2022-05-01 (#17671)
• dependencies: updating to version v0.20220921.1082044 of github.com/hashicorp/go-azure-sdk (#18557)
• provider: support for the oidc_token_file_path property and ARM_OIDC_TOKEN_FILE_PATH environment variable (#18335)
• Data Source: azurerm_databricks_workspace - exports the location propertuy (#18521)
• azurerm_api_management - support for the additional_location.gateway_disabled, certificate_source, and certificate_status properties (#18508)
• azurerm_automation_software_update_configuration - the classification property has been deprecated in favour of the classifications property that supports multiple values (#18539)
• azurerm_healthcare_fhir_service - support for the oci_artifact block (#18571)
• azurerm_healthcare_fhir - support for the public_network_access_enabled property (#18566)
• azurerm_iotcentral_application - support for the identity and public_network_access_enabled properties (#18564)
• azurerm_linux_virtual_machine - support for the gallery_application property (#18406)
• azurerm_machine_learning_workspace - support for the public_network_access_enabled and v1_legacy_mode properties (#18469)
• azurerm_storage_account - support for the multichannel_enabled property (#17999)
• azurerm_virtual_hub_bgp_connection - support for the virtual_network_connection_id property (#18469)
• azurerm_windows_virtual_machine - support for the gallery_application property (#18406)

BUG FIXES:

• Data Source: azurerm_key_vault_certificate_data - correctly create PEM private key block header for EC keys (#18419)
• azurerm_log_analytics_linked_storage_account - correctly data_source_type case handling (#18116)

3.24.0 (September 22, 2022)

FEATURES:

• New Resource: azurerm_automation_software_update_configuration (#17902)
• New Resource: azurerm_monitor_alert_processing_rule_action_group (#17006)
• New Resource: azurerm_monitor_alert_processing_rule_suppression (#17006)

ENHANCEMENTS:

• dependencies: updating to version v0.20220916.1125744 of github.com/hashicorp/go-azure-sdk (#18446)
• dependencies: disks - updating to use 2022-03-02 (#17671)
• Data Source: azurerm_automation_account - exports the identity attribute (#18478)
• Data Source: azurerm_storage_account - export the azure_files_identity_based_auth property (#18405)
• azurerm_api_management_api_operation - support the example, schema_id, and type_name properties (#18409)
• azurerm_cognitive_account - support for the customer_managed_key property (#18516)
• azurerm_data_factory_flowlet_data_flow - support for the rejected_linked_service property (#18056)
• azurerm_data_factory_data_flow - support for the rejected_linked_service property (#18056)
• azurerm_sentinel_alert_rule_scheduled - support for the techniques property (#18430)
• azurerm_linux_virtual_machine - support for the patch_assessment_mode property (#18437)
• azurerm_managed_disk - support for the PremiumV2_LRS type (#17671)
• azurerm_orchestrated_virtual_machine_scale_set - support for the user_data_base64 property (#18486)
• azurerm_private_endpoint - support for the custom_network_interface_name property (#18025)
• azurerm_virtual_machine_extension - support for the failure_suppression_enabled property (#18441)
• azurerm_virtual_machine_scale_set_extension - support for the failure_suppression_enabled property (#18441)
• azurerm_windows_virtual_machine - support for the patch_assessment_mode property (#18437)

BUG FIXES:

• azurerm_monitor_metric_alert - pass multi criteria to the API in the correct order (#18438)
• azurerm_monitor_diagnostic_settings - correctly parsing the case for the workspace_id property (#18467)
• azurerm_security_center_workspace - correctly parsing the case for the workspace_id property (#18467)

3.23.0 (September 15, 2022)

FEATURES:

• New Data Source: azurerm_private_dns_zone_virtual_network_link (#18045)
• New Data Source: azurerm_monitor_data_collection_rule (#18318)

ENHANCEMENTS:

• azurerm_api_management_api_schema - support for the components and definitions properties (#18394)
• azurerm_automation_account - support for the hybrid_service_url property (#18320)
• azurerm_batch_pool - support for the user_assigned_identity_id property (#17104)
• azurerm_batch_pool - support for the data_disks, disk_encryption, extensions, node_placement, task_scheduling_policy, user_accounts, and windows blocks (#18226)
• azurerm_cosmosdb_account - support for User Assigned identities (#18378)
• azurerm_eventhub_namespace - support for the public_network_access_enabled property (#18314)
• azurerm_logic_app_standard - support for the virtual_network_subnet_id property for vNet integration (#17731)
• azurerm_management_group_policy_remediation - the policy_definition_id property has been deprecated in favour of the more accuractly named policy_definition_reference_id property (#18037)
• azurerm_resource_policy_remediation - the policy_definition_id property has been deprecated in favour of the more accuractly named policy_definition_reference_id property (#18037)
• azurerm_resource_group_policy_remediation - the policy_definition_id property has been deprecated in favour of the more accuractly named policy_definition_reference_id property (#18037)
• azurerm_subscription_policy_remediation - the policy_definition_id property has been deprecated in favour of the more accuractly named policy_definition_reference_id property (#18037)

BUG FIXES:

• azurerm_netapp_volume: add extra validation when data_protection_snapshot_policy.0. snapshot_policy_id is empty (#18348)

3.22.0 (September 08, 2022)

FEATURES:

• New Resource: azurerm_api_management_api_tag_description (#17876)
• New Resource: azurerm_api_management_schema (#18158)
• New Resource: azurerm_automation_watcher (#17927)
• New Resource: azurerm_automation_source_control (#18175)
• New Resource: azurerm_container_registry_token_password (#15939)
• New Resource: azurerm_monitor_data_collection_rule_association (#17948)
• New Resource: azurerm_orbital_spacecraft (#17860)

ENHANCEMENTS:

• dependencies: updating to version v0.20220907.1111434 of github.com/hashicorp/go-azure-sdk (#18282)
• dependencies: desktopvirtualization - updating to use 2022-02-10 (#17489)
• dependencies: iothub.dps - update to use hashicorp/go-azure-sdk (#18299)
• azurerm_api_management_api - the soap_pass_through property has been deprecated in favour of the api_type property (#17812)
• azurerm_kubernetes_cluster - support for the edge_zone property (#18115)
• azurerm_kubernetes_cluster - support for the windows_profile.gmsa block (#16437)
• azurerm_mssql_database - support for the maintenance_configuration_name property (#18247)
• azurerm_virtual_desktop_host_pool - support for the scheduled_agent_updates block (#17489)
• azurerm_hdinsight_kafka_cluster - support for the extension property (#17846)
• azurerm_hdinsight_spark_cluster - support for the extension property (#17846)
• azurerm_hdinsight_interactive_query_cluster - support for the extension property (#17846)
• azurerm_hdinsight_hbase_cluster - support for the extension property (#17846)
• azurerm_hdinsight_hadoop_cluster - support for the extension property (#17846)

BUG FIXES:

• azurerm_mssql_database - the license_type property is now also Computed (#18230)
• azurerm_log_analytics_solution - a state migration to work around the previously incorrect id casing (#18291)

3.21.1 (September 02, 2022)

BREAKING CHANGES:

• azurerm_container_registry - the field azuread_authentication_as_arm_policy_enabled has been removed to fix a regression - support for this will be reintroduced in a future release.
• azurerm_container_registry - the field soft_delete_policy has been removed to fix a regression - support for this will be reintroduced in a future release.

NOTES:

• the containerregistry api version has been reverted to 2021-08-01-preview to restore the virtual_network block meaning the azuread_authentication_as_arm_policy_enabled and soft_delete_policy properties had to be removed as they were not supported by the API version that supported virtual network rules. (#18239)

BUG FIXES:

• azurerm_container_registry - the virtual_network block has been restored (#18239)
• azurerm_log_analytics_data_export_rule - a state migration to work around the previously incorrect id casing (#18240)

3.21.0 (September 01, 2022)

FEATURES:

• New Data Source: azurerm_monitor_data_collection_endpoint (#17992)
• New Resource: azurerm_app_service_connection (#16907)
• New Resource: azurerm_automation_hybrid_runbook_worker (#17893)
• New Resource: azurerm_api_management_gateway_certificate_authority (#17879)
• New Resource: azurerm_api_management_gateway_host_name_configuration (#17962)
• New Resource: azurerm_api_management_product_tag (#17798)
• New Resource: azurerm_automation_connection_type (#17538)
• New Resource: azurerm_automation_hybrid_runbook_worker_group (#17881)
• New Resource: azurerm_cdn_frontdoor_rule (#18010)
• New Resource: azurerm_cdn_frontdoor_secret (#18010)
• New Resource: azurerm_container_registry_task_schedule_run_now (#15120)
• New Resource: azurerm_cosmosdb_sql_dedicated_gateway (#18133)
• New Resource: azurerm_dashboard_grafana (#17840)
• New Resource: azurerm_healthcare_medtech_service (#15967)
• New Resource: azurerm_log_analytics_query_pack_query (#17929)
• New Resource: azurerm_spring_cloud_connection (#16907)
• New Resource: azurerm_search_shared_private_link_service (#17744)
• New Resource: azurerm_sentinel_alert_rule_nrt (#15999)

ENHANCEMENTS:

• dependencies: updating to version v0.20220830.1105041 of github.com/hashicorp/go-azure-sdk (#18183)
• dependencies: log_analytics - update to use hashicorp/go-azure-sdk (#18098)
• azurerm_batch_pool - support for the mount property (#18042)
• azurerm_container_registry - support for the azuread_authentication_as_arm_policy_enabled and soft_delete_policy properties (#17926)
• azurerm_cosmosdb_cassandra_cluster - support for the HoursBetweenBackups property (#18154)
• azurerm_hdinsight_kafka_cluster - add support for the disk_encryption property (#17351)
• azurerm_hdinsight_spark_cluster - add support for the disk_encryption property (#17351)
• azurerm_hdinsight_interactive_query_cluster - add support for the disk_encryption property (#17351)
• azurerm_hdinsight_hbase_cluster - add support for the disk_encryption property (#17351)
• azurerm_hdinsight_hadoop_cluster - add support for the disk_encryption property (#17351)
• azurerm_iothub_dps - support for the resource_count, parallel_deployments, and failure_percentage properties (#18151)
• azurerm_kubernetes_node_pool - spot node pools can now be upgraded (#18124)
• azurerm_linux_virtual_machine - the source_image_id property now supports both Community Gallery Images, and Shared Gallery Images resource IDs (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the following properties host_group_id, and extension_operations_enabled (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the data_disk block property name (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the scale_in block properties rule, and force_deletion_enabled (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the rolling_upgrade_policy block properties cross_zone_upgrade_enabled, and prioritize_unhealthy_instances_enabled (#17571)
• azurerm_linux_virtual_machine_scale_set - added support for the spot_restore block (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the spot_restore block properties enabled, and timeout (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the public_ip_address block property version (#17571)
• azurerm_linux_virtual_machine_scale_set - the source_image_id property now supports both Community Gallery Images, and Shared Gallery Images resource IDs (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the gallery_applications code block (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the gallery_applications block properties configuration_reference_blob_uri, order, package_referenceId, and tag (#17571)
• azurerm_linux_virtual_machine_scale_set - deprecated the scale_in_policy property in favour of the scale_in block due to additional fields being added (#17571)
• azurerm_linux_virtual_machine_scale_set - support for the scale_in block property rule (#17571)
• azurerm_management_group_policy_remediation - support for the resource_count, parallel_deployments, and failure_percentage properties (#17313)
• azurerm_monitor_diagnostic_setting - support for the category_group property (#16367)
• azurerm_orchestrated_virtual_machine_scale_set - support for the following properties capacity_reservation_group_id, single_placement_group, and extension_operations_enabled (#17571)
• azurerm_orchestrated_virtual_machine_scale_set - support for the extension block property suppress_failures_enabled (#17571)
• azurerm_orchestrated_virtual_machine_scale_set - support for the additional_capabilities block property ultra_ssd_enabled (#17571)
• azurerm_orchestrated_virtual_machine_scale_set - support for the public_ip_address block properties version, and sku_name (#17571)
• azurerm_orchestrated_virtual_machine_scale_set - support for linux_configuration, and windows_configuration code blocks property patch_assessment_mode (#17571)
• azurerm_orchestrated_virtual_machine_scale_set - the source_image_id property now supports both Community Gallery Images, and Shared Gallery Images resource IDs (#17571)
• azurerm_policy_definition - export the role_definition_ids` attribute (#18043)
• azurerm_resource_group_policy_remediation - support for the resource_count, parallel_deployments, and failure_percentage properties (#17313)
• azurerm_resource_policy_remediation - support for the resource_count, parallel_deployments, and failure_percentage properties (#17313)
• azurerm_role_assignment - support for scope to start with /providers/Subscription (#17456)
• azurerm_servicebus_namespace - support for the public_network_access_enabled and minimum_tls_version properties (#17805)
• azurerm_storage_account - support for the public_network_access_enabled property (#18005)
• azurerm_stream_analytics_output_eventhub - support for the authentication_mode property (#18096)
• azurerm_stream_analytics_output_mssql - support for the authentication_mode property (#18096)
• azurerm_stream_analytics_output_servicebus_topic - support for the authentication_mode property (#18096)
• azurerm_stream_analytics_output_powerbi - support for the token_user_principal_name and token_user_display_name properties (#18117)
• azurerm_stream_analytics_output_cosmosdb - support for the partition_key property (#18120)
• azurerm_stream_analytics_reference_input_blob - support for the authentication_mode property (#18137)
• azurerm_stream_analytics_reference_input_mssql - support for the table property (#18211)
• azurerm_subscription_policy_remediation - support for the resource_count, parallel_deployments, and failure_percentage properties (#17313)
• azurerm_windows_virtual_machine - the source_image_id property now supports both Community Gallery Images, and Shared Gallery Images resource IDs (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the following properties host_group_id, and extension_operations_enabled (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the data_disk block property name (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the scale_in block properties rule, and force_deletion_enabled (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the rolling_upgrade_policy block properties cross_zone_upgrade_enabled, and prioritize_unhealthy_instances_enabled (#17571)
• azurerm_windows_virtual_machine_scale_set - added support for the spot_restore block (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the spot_restore block properties enabled, and timeout (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the public_ip_address block property version (#17571)
• azurerm_windows_virtual_machine_scale_set - the source_image_id property now supports both Community Gallery Images, and Shared Gallery Images resource IDs (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the gallery_applications code block (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the gallery_applications block properties configuration_reference_blob_uri, order, package_referenceId, and tag (#17571)
• azurerm_windows_virtual_machine_scale_set - deprecated the scale_in_policy property in favour of the scale_in block due to additional fields being added (#17571)
• azurerm_windows_virtual_machine_scale_set - support for the scale_in block property rule (#17571)

BUG FIXES:

• azurerm_kubernetes_cluster - kube_config is now set when AAD is enabled for a v1.24 cluster (#18142)
• azurerm_redis_cache - will now recreate the cache when downgrading the SKU (#17767)
• azurerm_spring_cloud_service - ignore the default zero value for read_timeout_seconds (#18161)

3.20.0 (August 25, 2022)

FEATURES:

• Provider: support for generic OIDC authentication providers (#18118)
• New Resource: azurerm_backup_policy_vm_workload (#17765)
• New Resource: azurerm_monitor_scheduled_query_rules_alert_v2 (#17772)

ENHANCEMENTS:

• Dependencies: update go-azure-sdk to v0.20220824.1090858 (#18100)
• Dependencies: consumption - updating to use hashicorp/go-azure-sdk (#18101)
• azurerm_data_factory_dataset_json - filename and path in azure_blob_storage_location block can now be empty (#18061)

BUG FIXES:

• data.azurerm_kubernetes_cluster - kube_config is now set when AAD is enabled for a v1.24 cluster (#18131)
• azurerm_cosmosdb_sql_database - prevent panic in autoacale settings (#18070)
• azurerm_kubernetes_cluster_node_pool - fixa crash in expanding upgrade settings (#18074)
• azurerm_mssql_elastic_pool - list of values for maintenance_configuration_name is now correct (#18041)
• azurerm_postgresql_flexible_server - point_in_time_restore_time_in_utc correctly converts to RFC3339 (#18106)

3.19.1 (August 19, 2022)

BUG FIXES:

• azurerm_dns_a_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_aaaa_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_caa_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_cname_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_mx_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_ns_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_ptr_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_srv_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_txt_record - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)
• azurerm_dns_zone - parse resource IDs insensitively in the read functions due to casing on the dnsZones segment (#18048)

3.19.0 (August 18, 2022)

FEATURES:

• New Data Source: azurerm_dns_a_record (#17477)
• New Data Source: azurerm_dns_aaaa_record (#17477)
• New Data Source: azurerm_dns_caa_record (#17477)
• New Data Source: azurerm_dns_cname_record (#17477)
• New Data Source: azurerm_dns_mx_record (#17477)
• New Data Source: azurerm_dns_ns_record (#17477)
• New Data Source: azurerm_dns_ptr_record (#17477)
• New Data Source: azurerm_dns_soa_record (#17477)
• New Data Source: azurerm_dns_srv_record (#17477)
• New Data Source: azurerm_dns_txt_record (#17477)
• New Data Source: azurerm_private_dns_a_record (#18036)
• New Data Source: azurerm_private_dns_aaaa_record (#18036)
• New Data Source: azurerm_private_dns_cname_record (#18036)
• New Data Source: azurerm_private_dns_mx_record (#18036)
• New Data Source: azurerm_private_dns_ptr_record (#18036)
• New Data Source: azurerm_private_dns_soa_record (#18036)
• New Data Source: azurerm_private_dns_srv_record (#18036)
• New Data Source: azurerm_private_dns_txt_record (#18036)
• New Resource: azurerm_eventhub_namespace_schema_group (#17635)
• New Resource: azurerm_cdn_frontdoor_firewall_policy (#17715)
• New Resource: azurerm_cdn_frontdoor_security_policy (#17715)
• New Resource: azurerm_data_factory_flowlet_data_flow (#16987)

ENHANCEMENTS:

• Dependencies: update go-azure-helpers to v0.39.1 (#18015)
• Dependencies: update go-azure-sdk to v0.20220815.1092453 (#17998)
• Dependencies: dedicated_host_* to use hashicorp/go-azure-sdk (#17616)
• Dependencies: dataprotection: updating to use hashicorp/go-azure-sdk (#17700)
• Dependencies: dns - updating to use hashicorp/go-azure-sdk (#17986)
• Dependencies: maintenance - updating to use hashicorp/go-azure-sdk (#17954)
• Data Source: azurerm_images - now uses a logical id (#17766)
• Data Source: azurerm_management_group - now exports the management_group_ids, all_management_group_ids, and all_subscription_ids attributes (#16208)
• azurerm_active_directory_domain_service - support for the kerberos_armoring_enabled and kerberos_rc4_encryption_enabled properties (#17853)
• azurerm_application_gateway - support for the global block (#17651)
• azurerm_application_gateway - support for components in rewrite_rule_set.rewrite_rule.url (#13899)
• azurerm_automation_account - support for the private_endpoint_connection property (#17934)
• azurerm_automation_account - support for the encryption block and local_authentication_enabled property (#17454)
• azurerm_batch_account - support for the storage_account_authentication_mode, storage_account_node_identit, and allowed_authentication_modes properties (#16758)
• azurerm_batch_pool - support for identity referencees in container registries (#17416)
• azurerm_data_factory_data_flow - support for the flowlet block (#16987)
• azurerm_data_factory_integration_runtime_azure_ssis - support for the express_vnet_injection property (#17756)
• azurerm_firewall_policy_resource - support for the private_ranges and allow_sql_redirect properties (#17842)
• azurerm_key_vault - support for the public_network_access_enabled property (#17552)
• azurerm_linux_virtual_machine - now supports delete Eviction policies (#17226)
• azurerm_linux_virtual_machine_scale_set - now supports delete Eviction policies (#17226)
• azurerm_mssql_elastic_pool - support for the maintenance_configuration_name property (#17790)
• azurerm_mssql_server - support Disabled for the minimum_tls_version property (#16595)
• azurerm_spring_cloud_app - support the public_endpoint_enabled property (#17630)
• azurerm_spring_cloud_gateway_route_config - support for the open_api;azurerm_spring_cloud_service and log_stream_public_endpoint_enabledread_timeout_seconds properties (#17630)
• azurerm_shared_image - support for the architecture property (#17250)
• azurerm_storage_account - support for the default_to_oauth_authentication property (#17116)
• azurerm_storage_table_entity - support for specifying data types on entity properties (#15782)
• azurerm_shared_image_version - support for blob_uri and storage_account_id (#17768)
• azurerm_windows_virtual_machine - now supports delete Eviction policies (#17226)
• azurerm_windows_virtual_machine_scale_set - now supports delete Eviction policies (#17226)
• azurerm_web_application_firewall_policy - support for the excluded_rule_set property (#17757)
• azurerm_log_analytics_workspace - support for the cmk_for_query_forced property (#17365)
• azurerm_lb_backend_address_pool_address - support for the backend_address_ip_configuration_id property (#17770)

BUG FIXES:

• Data Source: azurerm_windows_web_app - add missing schema definition for 'virtual_network_subnet_id' (#18028)
• azurerm_cdn_endpoint_custom_domain - deprecating the key_vault_certificate_id property in favour of the key_vault_secret_id property withing the user_managed https_allows block (#17114)
• azurerm_data_protection_backup_policy_postgresql_resource - prevent a crash when given an empty criteria block (#17904)
• azurerm_disk_encryption_set - prevent an issue during creation when the disk encryption set and key vault are in different subscriptions (#17964)
• azurerm_windows_function_app fix a bug with setting values for WindowsFxString (#18014)
• azurerm_windows_function_app_slot - fixa bug with setting values for WindowsFxString (#18014)
• azurerm_linux_function_app - correctly send WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#18035)
• azurerm_linux_function_app - fixcontent settings when storage_uses_managed_identity is set to true (#18035)
• azurerm_linux_function_app_slot - correctly send WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#18035)
• azurerm_linux_function_app_slot - fixcontent settings when storage_uses_managed_identity is set to true (#18035)
• azurerm_windows_function_app - correctly send WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#18035)
• azurerm_windows_function_app - fixcontent settings when storage_uses_managed_identity is set to true (#18035)
• azurerm_windows_function_app_slot - correctly send WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#18035)
• azurerm_windows_function_app_slot - fixcontent settings when storage_uses_managed_identity is set to true (#18035)

3.18.0 (August 11, 2022)

FEATURES:

• New Resource: azurerm_monitor_data_collection_endpoint (#17684)

ENHANCEMENTS:

• dependencies: updating github.com/hashicorp/go-azure-sdk to v0.20220809.1122626 (#17905)
• storage: updating to use API Version 2021-09-01 (#17523)
• azurerm_express_route_circuit_peering - support for the ipv4_enabled and gateway_manager_etag properties (#17338)
• azurerm_site_recovery_replicated_vm - support for the target_disk_encryption block (#15783)
• azurerm_subnet - deprecate enforce_private_link_endpoint_network_policies property in favour of private_endpoint_network_policies_enabled (#17464)
• azurerm_subnet - deprecate enforce_private_link_service_network_policies property in favour of private_link_service_network_policies_enabled (#17464)
• azurerm_servicebus_subscription - support for the client_scoped_subscription_enabled property and the client_scoped_subscription block (#17101)

BUG FIXES:

• azurerm_backup_policy_vm - now prevents crash when frequency is set to Hourly and, hour_interval and hour_durationare not set (#17880)
• Data Source: azurerm_blueprint_definition - fixversion property output (#16299)

3.17.0 (August 04, 2022)

ENHANCEMENTS:

• domainservice: updating to use API Version 2021-05-01 (#17737)
• Data Source: azurerm_proximity_placement_group - refactoring to use hashicorp/go-azure-sdk (#17776)
• azurerm_api_management - update the sku_name property validation to accept newer Premium SKUs (#17887)
• azurerm_firewall - the property sku_tier is now updateable (#17577)
• azurerm_linux_virtual_machine_scale_set - the property instances is now Optional and defaults to 0 (#17836)
• azurerm_log_analytics_cluster - updated validation for the size_gb property (#17780)
• azurerm_proximity_placement_group - refactoring to use hashicorp/go-azure-sdk (#17776)
• azurerm_shared_image - improved validation for the publisher, offer and sku properties in the identifier block (#17547)
• azurerm_subnet - support for the service delegation Microsoft.Orbital/orbitalGateway (#17854)
• azurerm_eventhub_namespace - support for the local_authentication_enabled, public_network_access_enabled, and minimum_tls_version properties (#17194)

BUG FIXES:

• Data Source: azurerm_private_dns_zone - returning the correct Resource ID when not specifying the resource_group_name (#17729)

3.16.0 (July 28, 2022)

FEATURES:

• New Resource: azurerm_datadog_monitor (#16131)
• New Resource: azurerm_kusto_cluster_managed_private_endpoint (#17667)
• New Resource: azurerm_log_analytics_query_pack (#17685)
• New Resource: azurerm_logz_sub_account_tag_rule (#17557)
• New Resource: azurerm_signalr_shared_private_link_resource (#16187)

ENHANCEMENTS:

• dependencies: updating to version v0.20220725.1163004 of github.com/hashicorp/go-azure-sdk (#17753)
• automationaccount: updating to use hashicorp/go-azure-sdk (#17347)
• Data Source: azurerm_linux_function_app - support the virtual_network_subnet_id property for for vNet integration (#17494)
• Data Source: azurerm_windows_function_app - support the virtual_network_subnet_id property for for vNet integration (#17572)
• Data Source: azurerm_windows_web_app - support the virtual_network_subnet_id property for for vNet integration (#17576)
• eventhub: updating all data sources/resources onto single API Version 2021-11-01 (#17719)
• azurerm_bot_service_azure_bot - support for the streaming_endpoint_enabled property (#17423)
• azurerm_cognitive_account - support for the custom_question_answering_search_service_key property (#17683)
• asurerm_iothub_dps_certificate - support for the is_verified property (#17106)
• azurerm_linux_web_app  - the virtual_network_subnet_id property is no longer ForceNew (#17584)
• azurerm_linux_web_app_slot - the virtual_network_subnet_id property is no longer ForceNew (#17584)
• azurerm_linux_function_app support the virtual_network_subnet_id property for for vNet integration (#17494)
• azurerm_linux_function_app_slot support the virtual_network_subnet_id property for for vNet integration (#17494)
• azurerm_stream_analytics_stream_input_eventhub - support for the authentication_mode property (#17739)
• azurerm_windows_function_app support the virtual_network_subnet_id property for for vNet integration (#17572)
• azurerm_windows_function_app_slot support the virtual_network_subnet_id property for for vNet integration (#17572)
• azurerm_windows_web_app support the virtual_network_subnet_id property for for vNet integration (#17576)
• azurerm_windows_web_app_slot support the virtual_network_subnet_id property for for vNet integration (#17576)

BUG FIXES:

• azurerm_linux_function_app - fixcasing bug with the linux_fx_string property for Node apps (#17789)
• azurerm_linux_function_app_slot - fixcasing bug with the linux_fx_string property for Node apps (#17789)
• azurerm_resource_group_template_deployment - fixing a bug where the same Resource Provider defined in different casings would cause the API Version to not be identified (#17707)

3.15.1 (July 25, 2022)

BUG FIXES:

• data.azurerm_servicebus_queue - fixa regression around namespace_id (#17755)
• azurerm_postgresql_aad_administrator - fixthe state migration (#17732)
• azurerm_postgresql_server - fixa regression around id (#17755)

3.15.0 (July 21, 2022)

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_origin_group (#17089)
• New Data Source: azurerm_cdn_frontdoor_origin (#17089)
• New Resource: azurerm_cdn_frontdoor_origin_group (#17089)
• New Resource: azurerm_cdn_frontdoor_origin (#17089)
• New Resource: azurerm_application_insights_workbook (#17368)
• New Resource: azurerm_monitor_data_collection_rule (#17342)
• New Resource: azurerm_route_server (#16578)
• New Resource: azurerm_route_server_bgp_connection (#16578)
• New Resource: azurerm_web_pubsub_private_link_resource (#15550)

ENHANCEMENTS:

• dependencies: updating to v0.20220715.1071215 of github.com/hashicorp/go-azure-sdk (#17645)
• domainservice: to use hashicorp/go-azure-sdk (#17595)
• servicebus: refactoring to use hashicorp/go-azure-sdk (#17628)
• postgres: refactoring to use hashicorp/go-azure-sdk (#17625)
• azurerm_kusto_cluster_resource - support for the allowed_fqdns, allowed_ip_ranges, and outbound_network_access_restricted properties (#17581)
• azurerm_storage_account - supports for the change_feed_retention_in_days property (#17130)

3.14.0 (July 14, 2022)

FEATURES:

• New Resource: azurerm_application_insights_workbook_template (#17433)
• New Resource: azurerm_gallery_application (#17394)
• New Resource: azurerm_gallery_application_version (#17394)

ENHANCEMENTS:

• dependencies: updating to v0.20220712.1111122 of github.com/hashicorp/go-azure-sdk (#17606)
• dependencies: updating to v0.37.0 of github.com/hashicorp/go-azure-helpers (#17588)
• dependencies: updating to v2.18.0 of github.com/hashicorp/terraform-plugin-sdk (#17141)
• appconfiguration: updating to use API Version 2022-05-01 (#17467)
• spring: updating to use API Version 2022-05-01-preview (#17467)
• databricks: refactoring to use hashicorp/go-azure-sdk (#17475)
• lighthouse: refactoring to use hashicorp/go-azure-sdk (#17590)
• policyremediation: updated to use version 2021-10-01 (#17298)
• signalr: refactoring to use hashicorp/go-azure-sdk (#17463)
• storage: refactoring objectreplicationpolicy to use hashicorp/go-azure-sdk (#17471)
• Data Source: azurerm_availability_set - updating to use hashicorp/go-azure-sdk (#17608)
• Data Source: azurerm_ssh_public_key - refactoring to use hashicorp/go-azure-sdk (#17609)
• azurerm_availability_set - updating to use hashicorp/go-azure-sdk (#17608)
• azurerm_container_group - support for the http_headers property (#17519)
• azurerm_dashboard - refactoring to use hashicorp/go-azure-sdk (#17598)
• azurerm_kusto_cluster - support for the public_ip_address property (#17520)
• azurerm_kusto_script - support for the script_content property (#17522)
• azurerm_kusto_iothub_data_connection - support for the database_routing_type property (#17526)
• azurerm_kusto_eventhub_data_connection - support for the database_routing_type property (#17525)
• azurerm_kusto_eventgrid_data_connection - support for the database_routing_type, eventgrid_resource_id, and managed_identity_resource_id properties (#17524)
• azurerm_kubernetes_cluster - support for the host_group_id property (#17496)
• azurerm_kubernetes_cluster_node_pool - support for the host_group_id property (#17496)
• azurerm_linux_virtual_machine_scale_set - support for capacity_reservation_group_id property (#17530)
• azurerm_linux_virtual_machine_scale_set - support for the placement property for os disks (#17013)
• azurerm_orchestrated_virtual_machine_scale_set - support for the placement property for os disks (#17013)
• azurerm_shared_image - support for the end_of_life_date disk_types_not_allowed, max_recommended_vcpu_count, max_recommended_vcpu_count, max_recommended_memory_in_gb, min_recommended_memory_in_gb (#17300)
• azurerm_signalr_service - Add support for live_trace (#17629)
• azurerm_ssh_public_key - refactoring to use hashicorp/go-azure-sdk (#17609)
• azurerm_stream_analytics_output_blob - support for the authentication_mode property (#16652)
• azurerm_windows_virtual_machine_scale_set - support for capacity_reservation_group_id property (#17530)
• azurerm_windows_virtual_machine_scale_set - support for the placement property for os disks (#17013)

BUG FIXES:

• azurerm_api_management - correct set the API Management Cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (#17554)
• azurerm_dev_test_lab_schedule - deleting the schedule during deletion (#17614)
• azurerm_linux_function_app - set the default_hostname properly on read (#17498)
• azurerm_linux_function_app_slot - set the default_hostname properly on read (#17498)
• azurerm_windows_function_app - set the default_hostname properly on read (#17498)
• azurerm_windows_function_app - correctly create function apps when custom handlers are used (#17498)
• azurerm_windows_function_app_slot - set the default_hostname properly on read (#17498)
• azurerm_windows_function_app_slot - correctly create function apps when custom handlers are used (#17498)

3.13.0 (July 08, 2022)

FEATURES:

• New Data Source: azurerm_public_maintenance_configurations (#16810)
• New Resource: azurerm_fluid_relay_server (#17238)
• New Resource: azurerm_logz_sub_account (#16581)

ENHANCEMENTS:

• azurestackhci: refactoring to use hashicorp/go-azure-sdk (#17469)
• containerinstance: refactoring to use hashicorp/go-azure-sdk (#17499)
• eventhub: refactoring to use hashicorp/go-azure-sdk (#17445)
• hardwaresecuritymodules: refactoring to use hashicorp/go-azure-sdk (#17470)
• netapp: refactoring to use hashicorp/go-azure-sdk (#17465)
• privatedns: refactoring to use hashicorp/go-azure-sdk (#17436)
• Data Source: azurerm_container_registry - add support for the data_endpoint_enabled property (#17466)
• azurerm_hdinsight_kafka_cluster -support for the network block (#17259)
• azurerm_key_vault_certificate - will now correctly recover certificates on import (#17415)
• azurerm_kubernetes_clusterl- support for the capacity_reservation_group_id property (#17395)
• azurerm_kubernetes_node_pool- support for the capacity_reservation_group_id property (#17395)
• azurerm_linux_virtual_machine - support for the capacity_reservation_group_id property (#17236)
• azurerm_spring_cloud_deployment - support for the addon_json property (#16984)
• azurerm_synapse_integration_runtime_azure - the location property now supports Auto Resolve (#17111)
• azurerm_windows_virtual_machine - support for the capacity_reservation_group_id property (#17236)

BUG FIXES:

• azurerm_application_gateway - the request_routing_rule.x.priority property is now optional (#17380)

3.12.0 (June 30, 2022)

FEATURES:

• New Resource: azurerm_active_directory_domain_service_trust (#17045)
• New Resource: azurerm_data_protection_resource_guard (#17325)
• New Resource: azurerm_spring_cloud_api_portal_custom_domain (#16966)

ENHANCEMENTS:

• dependencies: updating to v0.20220628.1190740 of github.com/hashicorp/go-azure-sdk (#17399)
• appservice: replacing usages of ioutil with io (#17392)
• containerservice: updated to use version 2022-03-02-preview (#17084)
• elastic: refactoring to use hashicorp/go-azure-sdk (#17431)
• loadtest: refactoring to use hashicorp/go-azure-sdk (#17432)
• maps: refactoring to use hashicorp/go-azure-sdk (#17434)
• mixedreality: switching to use hashicorp/go-azure-sdk (#17417)
• msi: refactoring to use hashicorp/go-azure-sdk (#17430)
• powerbi: refactoring to use hashicorp/go-azure-sdk (#17435)
• purview: refactoring to use hashicorp/go-azure-sdk (#17419)
• redisenterprise: refactoring to use hashicorp/go-azure-sdk (#17387)
• relay: refactoring to use hashicorp/go-azure-sdk (#17385)
• search: refactoring to use hashicorp/go-azure-sdk (#17386)
• servicefabricmanaged: refactoring to use hashicorp/go-azure-sdk (#17384)
• trafficmanager: refactoring to use hashicorp/go-azure-sdk (#17383)
• videoanalyzer: refactoring to use hashicorp/go-azure-sdk (#17382)
• vmware: refactoring to use hashicorp/go-azure-sdk (#17381)
• Data Source: azurerm_key_vault_key - exporting the resource_id and resource_versionless_id attributes (#17424)
• Data Source: azurerm_key_vault_secret - exporting the resource_id and resource_versionless_id attributes (#17424)
• Data Source: azurerm_spatial_anchors_account - exposing the tags attribute (#17417)
• azurerm_bot_service_azure_bot - support new bot type with the microsoft_app_msi_id, microsoft_app_tenant_id, and microsoft_app_type properties (#17077)
• azurerm_bot_channels_registration - support for the streaming_endpoint_enabled property (#17369)
• azurerm_data_factory - support for the purview_id property (#17001)
• azurerm_digital_twins_instance - support for the identity block (#17076)
• azurerm_key_vault_key - exporting the resource_id and resource_versionless_id attributes (#17424)
• azurerm_key_vault_secret - exporting the resource_id and resource_versionless_id attributes (#17424)
• azurerm_kubernetes_cluster - support for version aliases (#17084)
• azurerm_linux_web_app - support for the virtual_network_subnet_id property (#17354)
• azurerm_linux_web_app_slot - support for the virtual_network_subnet_id property (#17354)
• azurerm_private_link_service - support for the fqdns property (#17366)
• azurerm_shared_image_version - support Premium_LRS for the storage_account_type property (#17390)
• azurerm_shared_image_version - support for the disk_encryption_set_id, end_of_life_date, and replication_mode properties (#17295)
• azurerm_static_site_custom_domain - the validation_type propety is now optional (#15849)
• azurerm_vpn_site - support for the o365_policy block (#16820)

BUG FIXES:

• Data Source: azurerm_key_vault - caching the Key Vault URI when the Key Vault has been retrieved (#17407)
• azurerm_application_gateway - prevent a crash when the waf_configuration block is removed (#17241)
• azurerm_data_factory_dataset_snowflake - ensuring schema is sent to the API to fix a UI bug in the Azure Data Factory Portal (#17346)
• azurerm_data_factory_linked_service_azure_file_storage - corredctly assign user_id(#17398)
• azurerm_key_vault - ensuring that soft_delete_enabled is explicitly set when purge_protection_enabled is set (#16368)
• azurerm_linux_function_app - correctly validate the app_setting_names and connection_string_names properties within the sticky_settings block (#17209)
• azurerm_linux_web_app - correctly configure auto_heal and slow_request (#17296)
• azurerm_linux_web_app - correctly validate the app_setting_names and connection_string_names properties within the sticky_settings block (#17209)
• azurerm_management_group_policy_assignment - the name property can no longer contain / (#16484)
• azurerm_policy_assignment - the name property can no longer contain / (#16484)
• azurerm_resource_group_policy_assignment - the name property can no longer contain / (#16484)
• azurerm_subscription_policy_assignment - the name property can no longer contain / (#16484)
• azurerm_windows_function_app - correctly validate the app_setting_names and connection_string_names properties within the sticky_settings block (#17209)
• azurerm_windows_web_app - correctly configure auto_heal and slow_request (#17296)
• azurerm_windows_web_app - correctly validate the app_setting_names and connection_string_names properties within the sticky_settings block (#17209)

3.11.0 (June 23, 2022)

FEATURES:

• New Data Source: azurerm_management_group_template_deployment (#14524)
• New Data Source: azurerm_policy_assignment (#16527)
• New Data Source: azurerm_resource_group_template_deployment (#14524)
• New Data Source: azurerm_subscription_template_deployment (#14524)
• New Data Source: azurerm_tenant_template_deployment (#14524)

ENHANCEMENTS:

• dependencies: updating to v0.20220623.1064317 of github.com/hashicorp/go-azure-sdk (#17348)
• batch: updating to use API Version 2022-01-01 (#17219)
• confidentialledger: updating to use API Version 2022-05-13 (#17146)
• desktopvirtualization: refactoring to use hashicorp/go-azure-sdk (#17340)
• Data Source: azurerm_managed_disk - exporting the disk_access_id attribute (#17270)
• Data Source: azurerm_managed_disk - exporting the network_access_policy attribute (#17270)
• Data Source: azurerm_storage_account - add support for the identity property (#17215)

BUG FIXES:

• Data Source: azurerm_mysql_flexible_server - generate the correct terraform resource ID (#17301)
• azurerm_shared_image - the privacy_statement_uri, publisher, offer, and sku fields are now ForceNew (#17289)
• azurerm_shared_image_* - correctly validate the gallery_name property (#17201)
• azurerm_time_series_insights_gen2_environment - correctly order id_properties (#17234)

3.10.0 (June 09, 2022)

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_rule_set (#17094)
• New Resource: azurerm_capacity_reservation_group (#16464)
• New Resource: azurerm_capacity_reservation (#16464)
• New Resource: azurerm_cdn_frontdoor_rule_set (#17094)

ENHANCEMENTS:

• azurerm_cosmosdb_cassandra_cluster - support for the authentication_method, client_certificate, external_gossip_certificate, external_seed_node, identity, repair_enabled and version properties (#16799)
• azurerm_key_vault_managed_hardware_security_module - support for purging when soft deleted (#17148)
• azurerm_hpc_cache - support for identity block and the key_vault_key_id and automatically_rotate_key_to_latest_enabled properties (#16972)

BUG FIXES:

• azurerm_api_management - default hostname proxy configuration is no longer ignored (#16524)
• azurerm_application_gateway - add default value for backend_http_settings.0.request_timeout (#17162)
• azurerm_applicaton_gateway -priority is now required (#16849)
• azurerm_container_group - Double the delete check timeout for nic (#17115)
• azurerm_windows_function_app_x - custom_domain_verification_id is now written to state file ((#17183)

3.9.0 (June 02, 2022)

FEATURES:

• New Data Source: azurerm_app_configuration_keys (#17053)
• New Data Source: azurerm_cdn_frontdoor_endpoint (#17078)
• New Data Source: azurerm_cdn_frontdoor_profile (#17061)
• New Resource: azurerm_cdn_frontdoor_endpoint (#17078)
• New Resource: azurerm_cdn_frontdoor_profile (#17061)
• New Resource: azurerm_sentinel_data_connector_office_atp (#16825)
• New Resource: azurerm_vpn_server_configuration_policy_group (#16911)

ENHANCEMENTS:

• dependencies: upgrading to v0.33.0 of github.com/hashicorp/go-azure-hepers (#17074)
• dependencies: upgrading to v1.6.1 of github.com/hashicorp/go-getter (#17074)
• dependencies: upgrade netapp to 2021-10-01 (#17043)
• azurerm_batch_job - refactor to split create and update (#17138)
• azurerm_data_factory_trigger_schedule - support for the pipeline block (#16922)
• azurerm_backup_policy_vm - support for V2 policies viu the policy_type property, supporting Enhanced Policies of the hourly type (#16940)
• azurerm_log_analytics_workspace - allow property updates when a workspace is linked to a cluster (#17069)
• azurerm_netapp_volume - support for the network_features property (#17043)
• azurerm_provider_registration - refactor to split create and update (#17138)
• azurerm_web_pubsub_hub - the event_handler block is now optional (#17037)
• azurerm_redis_cache - support the identity block (#16990)
• azurerm_service_fabric_managed_cluster - refactor to split create and update (#17138)
• azurerm_synapse_role_assignment - the role_name property now supports Synapse Monitoring Operator (#17024)
• azurerm_vpn_gateway_nat_rule - support for the port_range property (#16724)

BUG FIXES:

• azurerm_container_registry_task - sending authentication within the source_trigger block when updating (#17002)
• azurerm_eventhub_authorization_rule - extend regex char limit for name (#17057)
• azurerm_kubernetes_cluster - prevent a potential crash during import of a cluster that doesn't have an API Server Access Profile (#17005)

3.8.0 (May 26, 2022)

FEATURES:

• New Resource: azurerm_mssql_server_dns_alias (#16861)
• New Resource: azurerm_spring_cloud_gateway_route_config (#16721)
• New Resource: azurerm_spring_cloud_api_portal (#16719)
• New Resource: azurerm_spring_cloud_build_deployment (#16730)

ENHANCEMENTS:

• dependencies: upgrade botservice to 2021-05-01-preview (#16665)
• dependencies: upgrade keyvault to 2021-10-01 (#16955)
• azurerm_active_directory_domain_service - supports for the domain_configuration_type property (#16920)
• azurerm_backup_protected_vm - allow the attached vm to be disassociated from the backup (#16939)
• azurerm_backup_protected_vm - the backup is now removed from state when it is soft deleted (#16939)
• azurerm_portal_dashboard - now supports the display_name argument (#16406)
• azurerm_data_factory_trigger_schedule - support for the time_zone property (#16918)
• azurerm_linux_virtual_machine - add support for Confidential VMs (#16905)
• azurerm_linux_virtual_machine_scale_set - add support for Confidential VMs (#16916)
• azurerm_linux_web_app - add support for zip_deploy_file property (#16779)
• azurerm_linux_web_app_slot - add support for zip_deploy_file property (#16779)
• azurerm_managed_disk - add support for Confidential VM (#16908)
• azurerm_spring_cloud_service - suppport the build_agent_pool_size property (#16841)
• azurerm_spring_cloud_service- support the zone_redundant property (#16872)
• azurerm_synapse_spark_pool - the spark_version property now supports 3.2 (#16906)
• azurerm_virtual_network_gateway_connection - support for the egress_nat_rule_ids and ingress_nat_rule_ids properties (#16862)
• azurerm_vpn_gateway - support for the bgp_route_translation_for_nat_enabled property (#16817)
• azurerm_vpn_gateway_connection - support for the custom_bgp_address block (#16960)
• azurerm_windows_virtual_machine - add support for Confidential VMs (#16905)
• azurerm_windows_virtual_machine_scale_set - add support for Confidential VM (#16916)
• azurerm_windows_web_app - add support for zip_deploy_file property (#16779)
• azurerm_windows_web_app_slot - add support for zip_deploy_file property (#16779)

BUG FIXES:

• azurerm_mysql_server - fix an error updating public_network_access_enabled with replicas (#16506)
• azurerm_linux_function_app_slot - correctly check for name availability during creation (#16410)
• azurerm_windows_function_app_slot - correctly check for name availability during creation (#16410)
• azurerm_windows_virtual_machine - changing the timezone property now creates a new resources (#16866)

3.7.0 (May 19, 2022)

FEATURES:

• New Authentication Method: OIDC (#16555)
• New Data Source: azurerm_elastic_cloud_elasticsearch (#14821)
• New Resource: azurerm_elastic_cloud_elasticsearch (#14821)
• New Resource: azurerm_healthcare_fhir_service (#15913)
• New Resource: azurerm_virtual_network_gateway_nat_rule (#15720)

ENHANCEMENTS:

• dependencies: upgrade redis to 2020-12-01 (#16532)
• azurerm_container_registry - support changing replications (#16678)
• azurerm_disk_encryption_set - the encryption_type property now supports ConfidentialVmEncryptedWithCustomerKey (#16870)
• azurerm_linux_function_app - add support for PowerShell 7.2 (#16718)
• azurerm_signalr_service - support the Premium_P1 SKU (#16875)
• azurerm_spring_cloud_app - support for the identity block (#16280)
• azurerm_spring_cloud_app - support for the addon_json property (#16722)
• azurerm_windows_function_app - support for PowerShell 7.2 (#16718)
• azurerm_mssql_managed_instance - support for the maintenance_configuration_name property (#16832)

BUG FIXES:

• Data Source: azurerm_databricks_workspace - prevent a panic when the SKU field is missing (#16819)
• azurerm_application_insights_web_test - working around a breaking change in the API where creation would fail (#16845)
• azurerm_express_route_gateway - handle gateway connections not found error (#16804)
• azurerm_shared_image - changing the eula property now creates a new resource (#16868)

DEPRECATIONS:

• azurerm_video_analyzer - Video Analyzer (Preview) is now Deprecated and will be Retired on 2022-11-30 - as such this resource is deprecated and will be removed in v4.0 of the AzureRM Provider (#16847)
• azurerm_video_analyzer_edge_module - Video Analyzer (Preview) is now Deprecated and will be Retired on 2022-11-30 - as such this resource is deprecated and will be removed in v4.0 of the AzureRM Provider (#16847)

3.6.0 (May 12, 2022)

FEATURES:

• New Resource: azurerm_confidential_ledger (#15420)
• New Resource: azurerm_managed_disk_sas_token (#15558)
• New Resource: azurerm_spring_cloud_gateway (#16175)
• New Resource: azurerm_spring_cloud_build_pack_binding (#16673)
• New Resource: azurerm_spring_cloud_gateway_custom_domain (#16720)
• New Resource: azurerm_stream_analytics_output_powerbi (#16439)

ENHANCEMENTS:

• dependencies: updating to v64.0.0 of github.com/Azure/azure-sdk-for-go (#16631)
• dependencies: upgrade network to 2021-08-01 (#16631)
• azurerm_container_group - support for the key_vault_key_id property (Customer Managed Key encryption) (#16709)
• azurerm_cosmosdb_account - support mongo version 4.2 (#16738)
• azurerm_cosmosdb_cassandra_cluster - support for the tags property (#16743)
• azurerm_kubernetes_cluster_node_pool - the property node_labels can now be updated (#16360)
• azurerm_kubernetes_cluster - the property default_node_pool.node_labels can now be updated (#16360)
• azurerm_kubernetes_cluster - allow value none for network_profile.network_plugin (#16250)
• azurerm_kusto_script - lock kusto cluster so multiple scripts can be applied (#16690)
• azurerm_storage_share - support the access_tier attribute (#16462)
• azurerm_snapshot - support for the trusted_launch_enabled propertyu (#16679)
• azurerm_stream_analytics_function_javascript_uda - support for the input.configuration_parameter property (#16575)
• azurerm_stream_analytics_function_javascript_udf - support for the input.configuration_parameter property (#16579)
• azurerm_linux_virtual_machine - correctly support for the update the diff_disk_settings.placement property (#14847)
• azurerm_virtual_network_gateway_connection - support for the custom_bgp_addresses property (#16631)
• azurerm_windows_virtual_machine - correctly support for the update the diff_disk_settings.placement property (#14847)

BUG FIXES:

• azurerm_app_configuration_feature - allow successful creation of resource without specifying any optional filters (#16459)
• azurerm_mssql_managed_instance_failover_group - correctly import resource and sent primary isntance id (#16705)

3.5.0 (May 05, 2022)

FEATURES:

• New Data Source: azurerm_healthcare_dicom_service (#15887)
• New Resource: azurerm_healthcare_dicom_service (#15887)
• New Resource: azurerm_mssql_managed_instance_vulnerability_assessment (#16639)
• New resource: azurerm_sentinel_data_connector_aws_s3 (#16440)
• New Resource: azurerm_spring_cloud_builder (#16036)
• New Resource: azurerm_spring_cloud_configuration_service (#16087)

ENHANCEMENTS:

• dependencies: updating to v63.4.0 of github.com/Azure/azure-sdk-for-go (#16533)
• dependencies: updating to v1.5.11 of github.com/hashicorp/go-getter (#16659)
• dependencies: upgrade recoveryservices to 2021-12-01 (#16001)
• azurerm_linux_virtual_machine_scale_set - improve validation on the termination_notification.timeout property (#16594)
• azurerm_orchestrated_virtual_machine_scale_set - improve validation on the termination_notification.timeout property (#16594)
• azurerm_servicebus_namespace - the sku property can now be updated to Basic or Standard without recreating the resource (#16523)
• azurerm_storage_account - support for the cross_tenant_replication_enabled property (#16351)
• azurerm_windows_virtual_machine_scale_set - improve validation on the termination_notification.timeout property (#16594)
• azurerm_virtual_network_gateway_connection - the traffic_selector_policy property can now be specified (#15938)
• azurerm_stream_analytics_output_servicebus_queue - support for the property_columns and system_property_columns properties (#16572)

BUG FIXES:

• Data Source: azurerm_servicebus_queue_authorization_rule - prevent a possible crash by setting queue_name correctly (#16561)
• Data Source: azurerm_service_plan: - correctly populate the kind and os_type attributes (#16431)
• azurerm_data_factory_dataset_delimited_text - set defaults properly for column_delimiter, quote_character, escape_character, first_row_as_header and null_value (#16543)
• azurerm_linux_function_app - correctly deduplicate user app_settings (#15740)
• azurerm_linux_function_app - fix app_settings.WEBSITE_RUN_FROM_PACKAGE handling from external sources (#16641)
• azurerm_linux_function_app_slot - correctly deduplicate user app_settings (#15740)
• azurerm_linux_function_app_slot - fixapp_settings.WEBSITE_RUN_FROM_PACKAGE handling from external sources (#16641)
• azurerm_machine_learning_compute_cluster - resource will now be deleted instead of just detached (#16640)
• azurerm_windows_function_app - correctly deduplicate user app_settings (#15740)
• azurerm_windows_function_app_slot - correctly deduplicate user app_settings (#15740)

3.4.0 (April 28, 2022)

FEATURES:

• New Resource: azurerm_stream_analytics_output_cosmosdb (#16441)

ENHANCEMENTS:

• dependencies: updating to v63.1.0 of github.com/Azure/azure-sdk-for-go (#16283)
• dependencies: updating to v0.11.26 of github.com/Azure/go-autorest (#16458)
• dependencies: upgrading to v0.30.0 of github.com/hashicorp/go-azure-helpers (#16504)
• dependencies: upgrade sqlvirtualmachine to 2021-11-01-preview (#15835)
• Data Source: azurerm_linux_function_app - add support for sticky_settings (#16546)
• Data Source: azurerm_linux_web_app - add support for sticky_settings (#16546)
• Data Source: azurerm_windows_function_app - add support for sticky_settings (#16546)
• Data Source: azurerm_windows_web_app - add support for sticky_settings (#16546)
• azurerm_kubernetes_cluster - support for the run_command_enabled property (#15029)
• azurerm_linux_function_app - add support for sticky_settings (#16546)
• azurerm_linux_web_app - add support for sticky_settings (#16546)
• azurerm_monitor_aad_diagnostic_setting - remove validation on log.category to allow for new log categories that are available in Azure (#16534)
• azurerm_mssql_database - Support for short_term_retention_policy.0.backup_interval_in_hours (#16528)
• azurerm_postgresql_server - add validation for public_network_access_enabled (#16516)
• azurerm_stream_analytics_job - support for the type property (#16548)
• azurerm_windows_function_app - add support for sticky_settings (#16546)
• azurerm_windows_web_app - add support for sticky_settings (#16546)
• azurerm_linux_virtual_machine_scale_set - the terminate_notification property has been renamed to termination_notification (#15570)
• azurerm_windows_virtual_machine_scale_set - the terminate_notification property has been renamed to termination_notification (#15570)

BUG FIXES:

• azurerm_datafactory_dataset_x - fix crash around azure_blob_storage_location.0.dynamic_container_enabled (#16514)
• azurerm_kubernetes_cluster - allow updates to a cluster running a deprecated version of kubernetes (#16551)
• azurerm_resource_policy_remediation - will no longer try to cancel a completed remediation task during deletion (#16478)

3.3.0 (April 21, 2022)

FEATURES:

• New Resource: azurerm_spring_cloud_container_deployment (#16181)

ENHANCEMENTS:

• dependencies: updating to v0.19.0 of github.com/tombuildsstuff/giovanni (#16460)
• Data Source: azurerm_kubernetes_cluster - exporting the microsoft_defender block (#16218)
• Data Source: azurerm_storage_account - exporting the nfsv3_enabled attribute (#16404)
• azurerm_data_factory_linked_service_azure_blob_storage - support for the storage_kind property (#16403)
• azurerm_data_factory_linked_service_azure_blob_storage - support for the service_principal_linked_key_vault_key property (#16414)
• data_factory_linked_service_sql_server_resource - support for the user_name property (#16118)
• azurerm_kubernetes_cluster - support for the microsoft_defender block (#16218)
• azurerm_redis_enterprise_cluster - support for the linked_database_id and linked_database_group_nickname properties (#16045)
• azurerm_spring_cloud_service - support for the service_registry_enabled property (#16277)
• azurerm_stream_analytics_output_mssql - support for the system_property_columns property (#16425)
• azurerm_stream_analytics_output_servicebus_topic - support for the max_batch_count and max_writer_count properties (#16409)
• azurerm_stream_analytics_output_table - support for the columns_to_remove property (#16389)
• azurerm_virtual_hub_connection - the internet_security_enabled property can now be updated (#16430)

BUG FIXES:

• azurerm_cdn_endpoint - the origin.http and origin.https_ports properties now have thed efault values of 80 and 443 respectivly (#16143)
• azurerm_key_vault_certificate - now authenticates and manages resources correctly within the US Gov Cloud (#16455)
• azurerm_key_vault_key - now authenticates and manages resources correctly within the US Gov Cloud (#16455)
• azurerm_key_vault_managed_storage_account - now authenticates and manages resources correctly within the US Gov Cloud (#16455)
• azurerm_key_vault_secret - now authenticates and manages resources correctly within the US Gov Cloud (#16455)
• azurerm_kubernetes_cluster - the role_based_access_control_enabled property can now be disabled (#16488)
• azurerm_linux_function_app - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_linux_function_app - fixa bug in updates to app_settings where settings could be lost (#16442)
• azurerm_linux_function_app_slot - this ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_linux_web_app - the ip_address property is correctly set into state when the service_tag property is specified (#16426)
• azurerm_linux_web_app - fixa potential crash when an empty app_stack block is used (#16446)
• azurerm_linux_web_app_slot - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_linux_web_app_slot - fixa potential crash when an empty app_stack block is used (#16446)
• azurerm_sentinel_alert_rule_fusion - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_alert_rule_machine_learning_behavior_analytics - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_alert_rule_ms_security_incident - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_alert_rule_scheduled - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_data_connector_aws_cloud_trail - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_data_connector_microsoft_cloud_app_security - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_sentinel_data_connector_office_365 - will no longer send the etag property during updates as it is longer required (#16428)
• azurerm_storage_account - will now update identity before customer_managed_key enabling adding a new identity with access to the CMK (#16419)
• azurerm_subnet - the address_prefixes property is now (explicitly) required (#16402)
• azurerm_windows_function_app - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_windows_function_app - fixa bug in updates to app_settings where settings could be lost (#16442)
• azurerm_windows_function_app_slot - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_windows_web_app - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_windows_web_app - prevent a potential crash when an empty app_stack block is used (#16446)
• azurerm_windows_web_app_slot - the ip_address property is now correctly set into state when the service_tag property is specified (#16426)
• azurerm_windows_web_app_slot - prevent a potential crash when an empty app_stack block is used (#16446)

3.2.0 (April 14, 2022)

FEATURES:

• New Datasource: azurerm_kusto_database (#16180)
• New Resource: azurerm_container_connected_registry (#15731)
• New Resource: azurerm_managment_group_policy_exemption (#16293)
• New Resource: azurerm_resource_group_policy_exemption (#16293)
• New Resource: azurerm_resource_policy_exemption (#16293)
• New Resource: azurerm_stream_analytics_job_schedule (#16349)
• New Resource: azurerm_subscription_policy_exemption (#16293)

ENHANCEMENTS:

• Data Source: azurerm_stream_analytics_job - support for the last_output_time, start_mode, and start_time properties (#16349)
• azurerm_container_group - support for the init_container block (#16204)
• azurerm_machine_learning_workspace - renamed the public_network_access_enabled property to public_access_behind_virtual_network_enabled to better reflect what this property does (#16288)
• azurerm_media_streaming_endpoint support Standard Streaming Endpoints (#16304)
• azurerm_cdn_endpoint - the url_path_condition property now allows the RegEx and Wildcard values (#16385)

BUG FIXES:

• Data Source: azurerm_log_analytics_linked_storage_account - correctly set the data_source_type property (#16313)
• azurerm_lb_outbound_rule - allow 0 for the allocated_outbound_ports property (#16369)
• azurerm_mysql_flexible_server - backup_retention_days can now be set any value from 1-35 (#16312)
• azurerm_sentinel_watchlist - support for the required property item_search_key (#15861)
• azurerm_vpn_server_configuration - the server_root_certificate property is now optional (#16366)
• azurerm_storage_data_lake_gen2_path - support $superuser as an option for owner and group (#16370)
• azurerm_eventhub_namespace - can now be updated when customer managed keys are being used (#16371)
• azurerm_postgresql_flexible_server - high_availability blocks can now be added and removed (#16328)

3.1.0 (April 07, 2022)

FEATURES:

• New Resource: azurerm_container_registry_agent_pool (#16258)

ENHANCEMENTS:

• dependencies: updating to v63.0.0 of github.com/Azure/azure-sdk-for-go (#16147)
• dependencies: updating digitaltwins to use API Version 2020-12-01 (#16044)
• dependencies: updating streamanalytics to use API Version 2020-03-01 (#16270)
• provider: upgrading to Go 1.18 (#16247)
• Data Source: azurerm_kubernetes_cluster - support for the oidc_issuer_enabled and oidc_issuer_url properties [#16130]
• Data Source: azurerm_service_plan - add support for zone_balancing_enabled (#16156)
• azurerm_application_gateway - add KNOWN-CVES to accepted values for the rule_group_name property (#16080)
• azurerm_automation_account - the dsc_primary_access_key and dsc_secondary_access_key properties are now marked as sensitive (#16161)
• azurerm_cognitive_account - support for the custom_question_answering_search_service_id property (#15804)
• azurerm_consumption_budget_management_group - support for SubscriptionID and SubscriptionName options in the dimension block (#16074)
• azurerm_cosmosdb_gremlin_graph - the property indexing_mode is now case-sensitive (#16152)
• azurerm_cosmosdb_sql_container - the property indexing_mode is now case-sensitive (#16152)
• azurerm_dedicated_host - support for the the DSv3-Type4 and ESv3-Type4 SKUs (#16253)
• azurerm_kubernetes_cluster - support for the oidc_issuer_enabled and oidc_issuer_url properties [#16130]
• azurerm_kubernetes_cluster - the network_profile block now supports the ip_versions property (#16088)
• azurerm_mssql_database - support for the ledger_enabled property (#16214)
• azurerm_service_plan - support for the zone_balancing_enabled property (#16156)
• azurerm_servicebus_namespace - support for the customer_managed_key block (#15601)
• azurerm_web_application_firewall_policy - add KNOWN-CVES to accepted values for rule_group_name (#16080)
• azurerm_servicebus_namespace - add support for the local_auth_enabled property (#16268)

BUG FIXES:

• azurerm_api_management_api_operation_tag - now retrieves tags from the correct API (#16006)
• azurerm_api_management_api_operation - prevent a potential panic when parsing representation (#14848)
• azurerm_application_gateway - a frontend_ip_configuration blocks can now be updated (#16132)
• azurerm_application_insights - remove the disable logic for the created Action Groups (#16170)
• azurerm_cosmosdb_sql_container - disabling the analytical_storage_ttl property now forces a new resoruce to be created (#16229)
• azurerm_linux_function_app - only one of application_insights_key or application_insights_connection_string needs to be optionally specified (#16134)
• azurerm_linux_function_app_slot - only one of application_insights_key or application_insights_connection_string needs to be optionally specified (#16134)
• azurerm_windows_function_app - fixthe import check for Service Plan OS type (#16164)
• azurerm_linux_web_app_slot - fixcontainer_registry_managed_identity_client_id property validation (#16149)
• azurerm_windows_web_app - add support for dotnetcore in site metadata property current_stack (#16129)
• azurerm_windows_web_app - fixdocker windowsFXVersion when docker_container_registry is specified (#16192)
• azurerm_windows_web_app_slot - add support for dotnetcore in site metadata property current_stack (#16129)
• azurerm_windows_web_app_slot - fixdocker windowsFXVersion when docker_container_registry is specified (#16192)
• azurerm_storage_data_lake_gen2_filesystem - add support for $superuser in group and owner properties (#16215)

3.0.2 (March 26, 2022)

BUG FIXES:

• azurerm_cosmosdb_account - prevent a panic when the API returns an empty list of read or write locations (#16031)
• azurerm_cdn_endpoint - prevent a panic when there is an empty country_codes property (#16066)
• azurerm_key_vault - fixthe authorizer was not an auth.CachedAuthorizer error (#16078)
• azurerm_linux_function_app - correctly update storage settings when using MSI (#16046)
• azurerm_managed_disk - changing the zone property now correctly creates a new resource (#16070)
• azurerm_resource_group - will now during deletion if there are still resources found in the group it will wait a little bit and check again to handle eventually consistancy bugs (#16073)
• azurerm_windows_function_app - correctly update the storage settings when using MSI authentication (#16046)

3.0.1 (March 24, 2022)

BUG FIXES:

• provider: the prevent_deletion_if_contains_resources feature flag within the resource_group block now defaults to true (#16021)

3.0.0 (March 24, 2022)

NOTES:

• Major Version: Version 3.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 3.0 upgrade guide for more information.
• When upgrading to v3.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here) - the next major release of the AzureRM Provider (v4.0) will require Terraform 1.0 or later.

FEATURES:

• New Data Source: azurerm_healthcare_workspace (#15759)
• New Data Source: azurerm_key_vault_encrypted_value (#15873)
• New Data Source: azurerm_managed_api (#15797)
• New Resource: azurerm_api_connection (#15797)
• New Resource: azurerm_healthcare_workspace (#15759)
• New Resource: azurerm_stream_analytics_function_javascript_uda (#15831)
• New Resource: azurerm_security_center_server_vulnerability_assessment_virtual_machine (#15747)

ENHANCEMENTS:

• dependencies: updating to v62.3.0 of github.com/Azure/azure-sdk-for-go (#15927)
• dependencies: updating to v0.26.0 of github.com/hashicorp/go-azure-helpers (#15889)
• dependencies: updating appplatform to API Version 2022-01-01-preview (#15597)
• provider: MSAL (and Microsoft Graph) is now used for authentication instead of ADAL (and Azure Active Directory Graph) (#12443)
• provider: all (non-deprecated) resources now validate the Resource ID during import (#15989)
• provider: added a new feature flag within the api_management block for recover_soft_deleted, for configuring whether a soft-deleted azurerm_api_management should be recovered during creation (#15871)
• provider: added a new feature flag within the key_vault block for recover_soft_deleted_certificates, for configuring whether a soft-deleted azurerm_key_vault_certificate should be recovered during creation (#10273)
• provider: added a new feature flag within the key_vault block for purge_soft_deleted_certificates_on_destroy, for configuring whether a deleted azurerm_key_vault_certificate should be purged during deletion (#10273)
• provider: added a new feature flag within the key_vault block for recover_soft_deleted_keys, for configuring whether a soft-deleted azurerm_key_vault_key should be recovered during creation (#10273)
• provider: added a new feature flag within the key_vault block for purge_soft_deleted_keys_on_destroy, for configuring whether a deleted azurerm_key_vault_key should be purged during deletion (#10273)
• provider: added a new feature flag within the key_vault block for recover_soft_deleted_secrets, for configuring whether a soft-deleted azurerm_key_vault_secret should be recovered during creation (#10273)
• provider: added a new feature flag within the key_vault block for purge_soft_deleted_secrets_on_destroy, for configuring whether a deleted azurerm_key_vault_secret should be purged during deletion (#10273)
• provider: added a new feature flag within the resource_group block for prevent_deletion_if_contains_resources, for configuring whether Terraform should prevent the deletion of a Resource Group which still contains items (#13777)
• provider: the feature flag permanently_delete_on_destroy within the log_analytics_workspace block now defaults to true (#15948)
• Resources supporting Availability Zones: Zones are now treated consistently across the Provider and the field within Terraform has been renamed to either zone (for a single Zone) or zones (where multiple can be defined) - the complete list of resources can be found in the 3.0 Upgrade Guide (#14588)
• Resources supporting Managed Identity: Identity blocks are now treated consistently across the Provider - the complete list of resources can be found in the 3.0 Upgrade Guide (#15187)
• provider: removing the network and relaxed_locking feature flags, since this is now enabled by default (#15719)
• Data Source: azurerm_linux_function_app - support for the storage_key_vault_secret_id property (#15793)
• Data Source: azurerm_storage_account_sas - now exports the tag and filter attributes (#15863)
• Data Source: azurerm_windows_function_app - support for storage_key_vault_secret_id property (#15793)
• azurerm_application_insights - can now disable Rule and Action Groups that are automatically created (#15892)
• azurerm_cdn_endpoint - the host_name property has been renamed to fqdn (#15992)
• azurerm_eventgrid_system_topic_event_subscription - support for the delivery_property property (#15559)
• azurerm_iothub - add support for the authentication_type and identity_id properties in the file_upload block (#15874)
• azurerm_kubernetes_cluster - the kube_admin_config block is now marked as sensitive in addition to all items within it (#4105)
• azurerm_kubernetes_cluster - add support for the key_vault_secrets_provider and open_service_mesh_enabled property in Azure China and Azure Government (#15878)
• azurerm_linux_function_app - add support for the storage_key_vault_secret_id property (#15793)
• azurerm_linux_function_app - updating the read timeout to be 5m (#15867)
• azurerm_linux_function_app - support for node version 16 preview (#15884)
• azurerm_linux_function_app - add support for use_dotnet_isolated_runtime (#15969)
• azurerm_linux_function_app_slot - add support for use_dotnet_isolated_runtime (#15969)
• azurerm_linux_function_app_slot - add support for storage_key_vault_secret_id (#15793)
• azurerm_linux_function_app_slot - updating the read timeout to be 5m (#15867)
• azurerm_linux_virtual_machine - support for the termination_notification property (#14933)
• azurerm_linux_virtual_machine - support for the edge_zone property (#15890)
• azurerm_linux_virtual_machine_scale_set - support for the edge_zone property (#15890)
• azurerm_linux_web_app - support for PHP version 8.0 (#15933)
• azurerm_loadbalancer - support for the edge_zone property (#15890)
• azurerm_managed_disk - support for the edge_zone property (#15890)
• azurerm_management_group_policy_assignment - support for User Assigned Identities (#15376)
• azurerm_mssql_server - the minimum_tls_version property now defaults to 1.2 (#10276)
• azurerm_mysql_server - the ssl_minimal_tls_version_enforced property now defaults to 1.2 (#10276)
• azurerm_network_interface - support for the edge_zone property (#15890)
• azurerm_network_security_rule - no longer locks on the network security group name (#15719)
• azurerm_postgresql_server - the ssl_minimal_tls_version_enforced property now defaults to 1.2 (#10276)
• azurerm_public_ip - support for the edge_zone property (#15890)
• azurerm_redis_cache - the minimum_tls_version property now defaults to 1.2 (#10276)
• azurerm_resource_group - Terraform now checks during the deletion of a Resource Group if there's any items remaining and will raise an error if so by default (to avoid deleting items unintentionally). This behaviour can be controlled using the prevent_deletion_if_contains_resources feature-flag within the resource_group block within the features block. (#13777)
• azurerm_resource_group_policy_assignment - support for User Assigned Identities (#15376)
• azurerm_resource_policy_assignment - support for User Assigned Identities (#15376)
• azurerm_sentinel_alert_rule_scheduled - support for alert_details_override (#15901)
• azurerm_sentinel_alert_rule_scheduled - support for entity_mapping [#15901]
• azurerm_sentinel_alert_rule_scheduled - support for custom_details (#15901)
• azurerm_sentinel_alert_rule_scheduled - support for group_by_alert_details (#15901)
• azurerm_sentinel_alert_rule_scheduled - support for group_by_custom_details (#15901)
• azurerm_site_recovery_replicated_vm - support for the target_availability_zone property (#15617)
• azurerm_shared_image - support for the support_accelerated_network property (#15562)
• azurerm_static_site - the identity property now supports SystemAssigned and UserAssigned (#15834)
• azurerm_storage_account - the allow_blob_public_access property has been renamed to allow_nested_items_to_be_public to better represent what is being enabled (#12689)
• azurerm_storage_account - support for the edge_zone property (#15890)
• azurerm_storage_account - ZRS is no longer supported when using StorageV1 (#16004)
• azurerm_storage_account - the min_tls_version property now defaults to 1.2 (#10276)
• azurerm_storage_share - quota is now required (#15982)
• azurerm_subscription_policy_assignment - support for User Assigned Identities (#15376)
• azurerm_virtual_network - support for the edge_zone property (#15890)
• azurerm_virtual_network_gateway - support for the edge_zone property (#15890)
• azurerm_virtual_hub - support for the virtual_router_asn and virtual_router_ips properties (#15741)
• azurerm_windows_function_app - add support for storage_key_vault_secret_id property (#15793)
• azurerm_windows_function_app - updating the read timeout to be 5m (#15867)
• azurerm_windows_function_app node version validation string can not be prefixed with ~ (#15884)
• azurerm_windows_function_app support for node version 16 preview support (#15884)
• azurerm_windows_function_app - add support for use_dotnet_isolated_runtime (#15969)
• azurerm_windows_function_app_slot - add support for use_dotnet_isolated_runtime (#15969)
• azurerm_windows_function_app_slot - add support for the storage_key_vault_secret_id property (#15793)
• azurerm_windows_function_app_slot - updating the read timeout to be 5m (#15867)
• azurerm_windows_virtual_machine - support for the termination_notification property (#14933)
• azurerm_windows_virtual_machine - support for the edge_zone property (#15890)
• azurerm_windows_virtual_machine_scale_set - support for the edge_zone property (#15890)

BUG FIXES:

• provider: the recover_soft_deleted_key_vaults feature flag within the key_vault block now defaults to true (#15984)
• provider: the purge_soft_delete_on_destroy feature flag within the key_vault block now defaults to true [#15984]
• azurerm_app_configuration_feature - detecting that the key is gone when the App Configuration has been deleted (#15973)
• azurerm_app_configuration_key - detecting that the key is gone when the App Configuration has been deleted (#15973)
• azurerm_application_gateway - the backend_address_pool block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the field fqdns within the backend_address_pool block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the field ip_addresses within the backend_address_pool block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the backend_http_settings block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the frontend_port block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the field host_names within the frontend_port block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the http_listener block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the private_endpoint_connection block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the private_link_configuration block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the probe block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the redirect_configuration block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the request_routing_rule block is now a Set rather than a List (#6896)
• azurerm_application_gateway - the ssl_certificate block is now a Set rather than a List (#6896)
• azurerm_container_registry - validate the georepliactions property does not include the location of the Container Registry (#15847)
• azurerm_cosmosdb_mongo_collection - the default_ttl_seconds property can now be set to -1 (#15736)
• azurerm_eventhub - prevent panic when the capture_description block is removed (#15930)
• azurerm_key_vault_access_policy - validating the Resource ID during import (#15989)
• azurerm_linux_function_app - fixed update handling of app_settings for WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#15907)
• azurerm_linux_function_app_slot - fixed update handling of app_settings for WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#15907)
• azurerm_local_network_gateway - fixfor address_space cannot be updated (#15159)
• azurerm_log_analytics_cluster_customer_managed_key - detecting when the Customer Managed Key has been removed (#15973)
• azurerm_mssql_database_vulnerability_assessment_rule_baseline - prevent the resource from being replaced every apply (#14759)
• azurerm_security_center_auto_provisioning - validating the Resource ID during import [#15989]
• azurerm_security_center_setting - changing the setting_name property now forces a new resource (#15983)
• azurerm_synapse_workspace - fixing a bug where workspaces created from a Dedicated SQL Pool / SQL Data Warehouse couldn't be retrieved (#15829)
• azurerm_synapse_workspace_key - keys can now be correctly rotated (#15897)
• azurerm_windows_function_app - fixed update handling of app_settings for WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#15907)
• azurerm_windows_function_app_slot - fixed update handling of app_settings for WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING (#15907)

---

For information on changes between the v2.99.0 and v2.0.0 releases, please see the previous v2.x changelog entries.

For information on changes between the v1.44.0 and v1.0.0 releases, please see the previous v1.x changelog entries.

For information on changes prior to the v1.0.0 release, please see the v0.x changelog.