v4.20.0

FEATURES:

• New Data Source: azurerm_dynatrace_monitor (#28381)
• New Resource: azurerm_data_protection_backup_vault_customer_managed_key (#28679)

ENHANCEMENTS:

• dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.36.0 (#28788)
• dependencies: azurerm_data_factory_pipeline - update to use hashicorp/go-azure-sdk (#28768)
• Data Source: azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)
• azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)
• azurerm_pim_active_role_assignment - add support for Azure RBAC conditions (#27947)
• azurerm_storage_container - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)
• azurerm_storage_share - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)
• azurerm_storage_table - add attribute resource_manager_id (#28809)
• azurerm_windows_function_app - add support for node ~22 (#28815)
• azurerm_windows_function_app_slot - add support for node ~22 (#28815)

BUG FIXES:

• Data Source: azurerm_container_app - add missing ingress.client_certificate_mode property that caused an error when retrieving data (#28793)
• azurerm_data_factory_pipeline - fix error when unmarshaling the headers for a web activity (#28768)
• azurerm_mssql_virtual_machine - fix an issue that prevented users from using values only known during apply as the value for auto_backup.encryption_password (#28223)

v4.19.0

FEATURES:

• New Data Source: azurerm_stack_hci_storage_path (#28602)
• New Resource: azurerm_ai_foundry (#27424)
• New Resource: azurerm_ai_foundry_project (#27424)
• New Resource: azurerm_mssql_job_step (#28691)
• New Resource: azurerm_netapp_volume_group_oracle (#28391)
• New Resource: azurerm_virtual_machine_scale_set_standby_pool (#28441)

ENHANCEMENTS:

• dependencies: hashicorp/go-azure-sdk update to v0.20250213.1092825 (#28767)
• dependencies: sentinel partial update to 2023-12-01-preview (#28195)
• Data Source: azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)
• azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)
• azurerm_container_app - add support for the client_certificate_mode property (#28523)
• azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge for custom rules (#28717)
• azurerm_express_route_circuit - add support for the rate_limiting_enabled property (#28659)
• azurerm_mssql_managed_instance_failover_group - add support for secondary_type (#28633)
• azurerm_sentinal_alert_rule_scheduled - increase combined limit of entity_mapping and sentinal_entity_mapping to 10 (#28195)
• azurerm_service_plan - support for premium_plan_auto_scale_enabled (#28524)

BUG FIXES:

• azurerm_cdn_frontdoor_firewall_policy - fixed issue where the js_challenge_cookie_expiration_in_minutes policies default value caused Standard_AzureFrontDoor skus to receive a BadRequest error (#28726)
• azurerm_servicebus_topic - prevent perma diff when provisioning a partitioned topic within a non-partitioned namespace (#26680)
• azurerm_linux_function_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_linux_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)
• azurerm_linux_web_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_postgresql_flexible_server_virtual_endpoint - allow source_server_id and replica_server_id to reference the same server (#28733)
• azurerm_windows_function_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_windows_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)
• azurerm_windows_web_app - will no longer plan when site_config.0.cors is the default value (#28703)

v4.18.0

ENHANCEMENTS:

• dependencies: appconfiguration - update to API version 2024-05-01 (#28700)
• dependencies: update azurerm_cdn_frontdoor_rule to API version 2024-02-01 (#28308)
• dependencies: update azurerm_cdn_frontdoor_ruleset to API version 2024-02-01 (#28308)
• dependencies: update go-azure-sdk to v0.20250131.1134653 (#28674)
• Data Source: azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)
• Data Source: azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)
• azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)
• azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge action type in the managed_rule override block (#28308)
• azurerm_container_app - add support for the volume_mounts.sub_path property (#27533)
• azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_network_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_route_server - add support for the hub_routing_preference property (#28363)

BUG FIXES:

• azurerm_logic_app_action_http - fix issue where queries would be set to an empty map instead of null when omitted from the configuration (#28447)
• azurerm_machine_learning_compute_cluster - allow resource creation when node_public_ip_enabled is false and subnet_resource_id has not been specified (#28673)
• azurerm_network_watcher_flow_log - prevent panic when removing the traffic_analytics block (#28416)
• azurerm_oracle_autonomous_database - fix incorrect type for the supported_regions_to_clone_to property (#28536)

v4.17.0

FEATURES:

• New Data Source: azurerm_api_management_subscription (#27824)
• New Resource: azurerm_cognitive_account_rai_policy (#28013)
• New Resource: azurerm_mssql_job_target_group (#28492)

ENHANCEMENTS:

• dependencies: network - update to use 2024-05-01 (#28146)
• dependencies: privatedns - update to use 2024-06-01 (#28599)
• dependencies: storage - update to use 2023-05-01 (#27760)
• Data Source: azure_communication_service - add support for the hostname property (#28620)
• azurerm_api_management - capacity now has a max limit of 50 (#28648)
• azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#27950)
• azurerm_cognitive_account - support for the bypass property (#28221)
• azure_communication_service - add support for the hostname property (#28620)
• azurerm_container_app_environment - add support for Azure Monitor as a log destination (#26047)
• azurerm_mssql_elasticpool- add support for MOPRMS pool type and update validation for PRMS and Gen5 pool types (#28453)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#28480)
• azurerm_stream_analytics_output_cosmosdb - support for the authentication_mode property (#28372)
• azurerm_stream_analytics_stream_input_blob - add support for authentication_mode (#27853)

BUG FIXES:

• azurerm_container_app - update the validation regex for the resource's name (#28528)
• azurerm_kubernetes_cluster - parse oms_agent.log_analytics_workspace_id insensitively to handle inconsistent casing (#28575)
• azurerm_kubernetes_flux_configuration - fix issue where removing post_build from a kustomization resulted in an error from the API (#28590)
• azurerm_linux_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_log_analytics_storage_insights - use subscription from workspace ID when building the resource ID (#28469)
• azurerm_orchestrated_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_virtual_machine - parse os_disk insensitively to handle inconsistent casing (#28592)
• azurerm_windows_virtual_machine_scale_set - Prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)

v4.16.0

NOTE: This release contains a breaking change reverting redisenterprise API version from 2024-10-01 to 2024-06-01-preview as not all regions are currently supported in the 2024-10-01 version

BREAKING CHANGES:

• dependencies - redisenterprise API version reverted from 2024-10-01 to 2024-06-01-preview (#28516)

FEATURES:

• New Resource: azurerm_container_registry_credential_set (#27528)
• New Resource: azurerm_mssql_job (#28456)
• New Resource: azurerm_mssql_job_schedule (#28456)

ENHANCEMENTS:

• dependencies - update hashicorp/go-azure-sdk to v0.20250115.1141151 (#28519)
• dependencies - costmanagement update to use 2023-08-01 (#27680)
• dependencies - postgresql update API version to 2024-08-01 (#28474)
• azurerm_container_app – support for the termination_grace_period_seconds property (#28307)
• azurerm_cost_anomaly_alert - add support for the notification_email property (#27680)
• azurerm_data_protection_backup_vault - support for immutability property (#27859)
• azurerm_databricks_workspace - fix ignore_changes support (#28527)
• azurerm_kubernetes_cluster_node_pool - add support for the temporary_name_for_rotation property to allow node pool rotation (#27791)
• azurerm_linux_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_linux_web_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_windows_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)

BUG FIXES:

• azurerm_logic_app_standard - fix setting public_network_access for conflicting API properties (#28465)
• azurerm_redis_cache - data_persistence_authentication_method can now be unset (#27932)
• azurerm_mssql_database - fix bug where verifying TDE might fail to return an error on failure (#28505)
• azurerm_mssql_database - fix several potential bugs where retry functions could return false negatives for actual errors (#28505)
• azurerm_private_endpoint - fix a bug where reading Private DNS could error and exit the Read of the resource early without raising an error (#28505)

v4.15.0

FEATURES:

• New Data Source: azurerm_kubernetes_fleet_manager (#28278)
• New Resource: azurerm_arc_kubernetes_provisioned_cluster (#28216)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#27874)
• New Resource azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#27931)
• New Resource azurerm_dynatrace_tag_rules (#27985)

ENHANCEMENTS:

• dependencies - update tool Go version and bump go-git version to 5.13.0 (#28425)
• dependencies - update hashicorp/go-azure-sdk to v0.20241212.1154051 (#28360)
• dependencies - frontdoor - partial update to use 2024-02-01 API (#28233)
• dependencies - postgresql - update to 2024-08-01 (#28380)
• dependencies - redisenterprise - update to 2024-10-01 and support for new skus (#28280)
• Data Source: azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• Data Source: azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• Data Source: azurerm_static_web_app - add support for the repository_url and repository_branch properties (#27401)
• azurerm_billing_account_cost_management_export - add support for the file_format property (#27122)
• azurerm_cdn_frontdoor_profile - add support for the identity property (#28281)
• azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#28404)
• azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#28442)
• azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#25695)
• azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_netapp_volume - make the network_features property Optional/Computed (#28390)
• azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• azurerm_resource_group_cost_management_export - add support for the file_format property (#27122)
• azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#28398)
• azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#27401)
• azurerm_subscription_cost_management_export - add support for the file_format property (#27122)
• azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#27830)
• azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#24801)

BUG FIXES:

• azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#28427)
• azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#28312)
• azurerm_batch_pool - support for new block security_profile (#28069)
• azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#27876)
• azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#28215)
• azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#28269)
• azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#28319)
• azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#28279)

v4.14.0

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#28043)
• New Resource: azurerm_fabric_capacity (#28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#28211)
• nginx - update api version to 2024-11-01-preview (#28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#28228)

v4.13.0

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#28105)

v4.12.0

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#28137)
• containerapps - update api version to 2024-03-01 (#28074)
• Search - update api version to 2024-06-01-preview (#27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#28114)

v4.11.0

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#28083)
• New Resource: azurerm_eventgrid_namespace (#27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#28075)
• batch - upgrade api version to 2024-07-01 (#27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#28039)
• azurerm_arc_machine - add support for the identity and tags properties (#27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#28039)

BUG:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#27828)